[dom4j] 23/74: Re-enable test case BeansTest by running tests in headless mode. (Closes: #403052)

[Emmanuel Bourg]

This is an automated email from the git hooks/post-receive script.

ebourg-guest pushed a commit to branch master
in repository dom4j.

commit 1e81b178a9e713748ea29a296ab36ddf8c251405
Author: Marcus Better <mar...@better.se>
Date:   Mon May 18 16:17:54 2009 +

Re-enable test case BeansTest by running tests in headless
mode. (Closes: #403052)
---
 dom4j/build.xml | 1 -
 dom4j/debian/ant.properties | 1 +
 dom4j/debian/changelog  | 4 +++-
 dom4j/debian/rules  | 3 ++-
 4 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/dom4j/build.xml b/dom4j/build.xml
index f7b3fd2..bd028d5 100644
--- a/dom4j/build.xml
+++ b/dom4j/build.xml
@@ -292,7 +292,6 @@
   
   
   
-  
 
   
 
diff --git a/dom4j/debian/ant.properties b/dom4j/debian/ant.properties
new file mode 100644
index 000..a1d8f2a
--- /dev/null
+++ b/dom4j/debian/ant.properties
@@ -0,0 +1 @@
+java.awt.headless=true
diff --git a/dom4j/debian/changelog b/dom4j/debian/changelog
index 595ab11..9a6ff3b 100644
--- a/dom4j/debian/changelog
+++ b/dom4j/debian/changelog
@@ -4,8 +4,10 @@ dom4j (1.6.1+dfsg.2-1) UNRELEASED; urgency=low
   * Change section to java.
   * Remove source files from jaxen since we have (circular) build
 dependency on libjaxen-java. (Closes: #427913)
+  * Re-enable test case BeansTest by running tests in headless
+mode. (Closes: #403052)
 
- -- Marcus Better <mar...@better.se>  Mon, 18 May 2009 17:55:40 +0200
+ -- Marcus Better <mar...@better.se>  Mon, 18 May 2009 18:05:17 +0200
 
 dom4j (1.6.1+dfsg-3) unstable; urgency=low
 
diff --git a/dom4j/debian/rules b/dom4j/debian/rules
index 86e096e..858ad48 100755
--- a/dom4j/debian/rules
+++ b/dom4j/debian/rules
@@ -15,8 +15,9 @@ DEB_CLASSPATH = $(shell for jar in $(DEB_JARS); do \
done; \
if [ -f "$(JAVA_HOME)/lib/tools.jar" ]; then echo -n 
"$(JAVA_HOME)/lib/tools.jar"; fi)
 
+ANT_ARGS   := -propertyfile debian/ant.properties
 ANT_INVOKE := $(JAVACMD) -classpath $(DEB_CLASSPATH) \
-   org.apache.tools.ant.Main $(DEB_ANT_ARGS)
+   org.apache.tools.ant.Main $(ANT_ARGS)
 
 PKGNAME:= libdom4j-java
 INSTALLDIR := $(CURDIR)/debian/$(PKGNAME)

-- 
Alioth's /usr/local/bin/git-commit-notice on 
/srv/git.debian.org/git/pkg-java/dom4j.git

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits

Processed: Re: Bug#871964: swt-gtk: Build-depends on libwebkitgtk-dev which is deprecated

[Debian Bug Tracking System]

Processing control commands:

> tags -1 pending
Bug #871964 [src:swt-gtk] swt-gtk: Build-depends on libwebkitgtk-dev which is 
deprecated
Added tag(s) pending.

-- 
871964: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871964
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: jblas FTBFS with multiarch libatlas-base-dev

[Debian Bug Tracking System]

Processing control commands:

> owner -1 !
Bug #877225 [src:jblas] jblas FTBFS with multiarch libatlas-base-dev
Owner recorded as Markus Koschany .

-- 
877225: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877225
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#871964: swt-gtk: Build-depends on libwebkitgtk-dev which is deprecated

[Debian Bug Tracking System]

Processing control commands:

> tags 879170 - buster sid
Bug #879170 [src:swt-gtk] libswt-webkit-gtk-3-jni: Needs libwebkitgtk-1.0-0 dep
Removed tag(s) buster and sid.
> clone 879170 -2
Bug #879170 [src:swt-gtk] libswt-webkit-gtk-3-jni: Needs libwebkitgtk-1.0-0 dep
Bug 879170 cloned as bug 879228
> reassign 879170 libswt-webkit-gtk-3-jni
Bug #879170 [src:swt-gtk] libswt-webkit-gtk-3-jni: Needs libwebkitgtk-1.0-0 dep
Bug reassigned from package 'src:swt-gtk' to 'libswt-webkit-gtk-3-jni'.
Ignoring request to alter found versions of bug #879170 to the same values 
previously set
Ignoring request to alter fixed versions of bug #879170 to the same values 
previously set
> reassign -2 libswt-webkit-gtk-4-jni
Bug #879228 [src:swt-gtk] libswt-webkit-gtk-3-jni: Needs libwebkitgtk-1.0-0 dep
Bug reassigned from package 'src:swt-gtk' to 'libswt-webkit-gtk-4-jni'.
Ignoring request to alter found versions of bug #879228 to the same values 
previously set
Ignoring request to alter fixed versions of bug #879228 to the same values 
previously set
> retitle -2 libswt-webkit-gtk-4-jni: Missing webkit dependency
Bug #879228 [libswt-webkit-gtk-4-jni] libswt-webkit-gtk-3-jni: Needs 
libwebkitgtk-1.0-0 dep
Changed Bug title to 'libswt-webkit-gtk-4-jni: Missing webkit dependency' from 
'libswt-webkit-gtk-3-jni: Needs libwebkitgtk-1.0-0 dep'.

-- 
871964: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871964
879170: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879170
879228: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879228
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#681726: Time to remove eclipse from Testing?

[Debian Bug Tracking System]

Processing control commands:

> severity -1 serious
Bug #681726 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #725377 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #732959 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #738506 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #789928 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #831603 [src:eclipse] eclipse version
Severity set to 'serious' from 'wishlist'
Severity set to 'serious' from 'wishlist'
Severity set to 'serious' from 'wishlist'
Severity set to 'serious' from 'wishlist'
Severity set to 'serious' from 'wishlist'
Severity set to 'serious' from 'wishlist'

-- 
681726: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681726
725377: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725377
732959: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732959
738506: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738506
789928: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789928
831603: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831603
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: eclipse version

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> reassign 681726 source:eclipse
Bug #681726 [eclipse] eclipse: Upgrade to latest upstream release (HELP WANTED)
Bug #725377 [eclipse] eclipse: Upgrade to latest upstream release (HELP WANTED)
Bug #732959 [eclipse] eclipse: Upgrade to latest upstream release (HELP WANTED)
Bug #738506 [eclipse] eclipse: Upgrade to latest upstream release (HELP WANTED)
Bug #789928 [eclipse] eclipse: Upgrade to latest upstream release (HELP WANTED)
Bug reassigned from package 'eclipse' to 'src:eclipse'.
Bug reassigned from package 'eclipse' to 'src:eclipse'.
Bug reassigned from package 'eclipse' to 'src:eclipse'.
Bug reassigned from package 'eclipse' to 'src:eclipse'.
Bug reassigned from package 'eclipse' to 'src:eclipse'.
No longer marked as found in versions eclipse/3.8.1-4, eclipse/3.8.0~rc4-1, and 
eclipse/3.8.1-7.
No longer marked as found in versions eclipse/3.8.1-4, eclipse/3.8.0~rc4-1, and 
eclipse/3.8.1-7.
No longer marked as found in versions eclipse/3.8.0~rc4-1, eclipse/3.8.1-7, and 
eclipse/3.8.1-4.
No longer marked as found in versions eclipse/3.8.0~rc4-1, eclipse/3.8.1-7, and 
eclipse/3.8.1-4.
No longer marked as found in versions eclipse/3.8.0~rc4-1, eclipse/3.8.1-7, and 
eclipse/3.8.1-4.
Ignoring request to alter fixed versions of bug #681726 to the same values 
previously set
Ignoring request to alter fixed versions of bug #725377 to the same values 
previously set
Ignoring request to alter fixed versions of bug #732959 to the same values 
previously set
Ignoring request to alter fixed versions of bug #738506 to the same values 
previously set
Ignoring request to alter fixed versions of bug #789928 to the same values 
previously set
> forcemerge 681726 831603
Bug #681726 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #725377 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #732959 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #738506 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #789928 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #831603 [src:eclipse] eclipse version
Severity set to 'wishlist' from 'important'
706416 was blocked by: 789928 826269 738506 725377 734820 732959 681726 734797
706416 was blocking: 587820
Added blocking bug(s) of 706416: 831603
433270 was blocked by: 789928 826269 738506 725377 734820 732959 681726 734797
433270 was blocking: 587820
Added blocking bug(s) of 433270: 831603
433270 was blocked by: 826269 681726 732959 734820 789928 831603 734797 738506 
725377
433270 was blocking: 587820
Ignoring request to alter blocking bugs of bug #433270 to the same blocks 
previously set
706416 was blocked by: 826269 681726 732959 734820 789928 831603 734797 738506 
725377
706416 was blocking: 587820
Ignoring request to alter blocking bugs of bug #706416 to the same blocks 
previously set
Added tag(s) upstream and help.
Bug #725377 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #732959 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #738506 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Bug #789928 [src:eclipse] eclipse: Upgrade to latest upstream release (HELP 
WANTED)
Merged 681726 725377 732959 738506 789928 831603
>
End of message, stopping processing here.

Please contact me if you need assistance.
-- 
433270: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433270
681726: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681726
706416: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706416
725377: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725377
732959: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732959
738506: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738506
789928: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789928
831603: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831603
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: libswt-webkit-gtk-3-jni: Missing dependency on libwebkitgtk-1.0-0

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> retitle 879170 libswt-webkit-gtk-3-jni: Needs libwebkitgtk-1.0-0 dep
Bug #879170 [src:swt-gtk] libswt-webkit-gtk-3-jni: Missing dependency on
Changed Bug title to 'libswt-webkit-gtk-3-jni: Needs libwebkitgtk-1.0-0 dep' 
from 'libswt-webkit-gtk-3-jni: Missing dependency on'.
>
End of message, stopping processing here.

Please contact me if you need assistance.
-- 
879170: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879170
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#871964: swt-gtk: Build-depends on libwebkitgtk-dev which is deprecated

[Debian Bug Tracking System]

Processing control commands:

> clone -1 -2
Bug #871964 [src:swt-gtk] swt-gtk: Build-depends on libwebkitgtk-dev which is 
deprecated
Bug 871964 cloned as bug 879170
> retitle -2 libswt-webkit-gtk-3-jni: Missing dependency on
Bug #879170 [src:swt-gtk] swt-gtk: Build-depends on libwebkitgtk-dev which is 
deprecated
Changed Bug title to 'libswt-webkit-gtk-3-jni: Missing dependency on' from 
'swt-gtk: Build-depends on libwebkitgtk-dev which is deprecated'.

-- 
871964: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871964
879170: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879170
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#877075: sikulix: hard coded dependency on libopencv2.4-java

[Debian Bug Tracking System]

Processing control commands:

> retitle -1 sikulix: hard coded dependency on libopencv3.2-java
Bug #877075 [libsikulixapi-java] sikulix: hard coded dependency on 
libopencv2.4-java
Changed Bug title to 'sikulix: hard coded dependency on libopencv3.2-java' from 
'sikulix: hard coded dependency on libopencv2.4-java'.
> unblock 841733 by -1
Bug #841733 [release.debian.org] transition: opencv
841733 was blocked by: 878793 841411 865831 841246 841416 861122 861270 841413 
841370 841407 841287 861194 841245 841408 877075 878549 812032 841412 841410 
841406 841405 877073 841409
841733 was not blocking any bugs.
Removed blocking bug(s) of 841733: 877075
> severity -1 normal
Bug #877075 [libsikulixapi-java] sikulix: hard coded dependency on 
libopencv3.2-java
Severity set to 'normal' from 'serious'

-- 
841733: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841733
877075: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877075
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#859005: Bug#859001: Let's remove BrowserLauncher from Stretch

[Debian Bug Tracking System]

Processing control commands:

> clone -1 -2
Bug #859005 [ftp.debian.org] RM: libbrowserlauncher-java -- 
ROM;obsolete;rc-buggy
Bug 859005 cloned as bug 878765
> reassign -1 libbrowserlauncher-java
Bug #859005 [ftp.debian.org] RM: libbrowserlauncher-java -- 
ROM;obsolete;rc-buggy
Bug reassigned from package 'ftp.debian.org' to 'libbrowserlauncher-java'.
Ignoring request to alter found versions of bug #859005 to the same values 
previously set
Ignoring request to alter fixed versions of bug #859005 to the same values 
previously set
> severity -1 serious
Bug #859005 [libbrowserlauncher-java] RM: libbrowserlauncher-java -- 
ROM;obsolete;rc-buggy
Severity set to 'serious' from 'normal'

-- 
859005: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859005
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#859005: Bug#859001: Let's remove BrowserLauncher from Stretch

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 ftp.debian.org
Bug #859005 [libbrowserlauncher-java] libbrowserlauncher-java: properties file 
not included
Bug reassigned from package 'libbrowserlauncher-java' to 'ftp.debian.org'.
No longer marked as found in versions libbrowserlauncher-java/1.3+dfsg-1.
Ignoring request to alter fixed versions of bug #859005 to the same values 
previously set
> retitle -1 RM: libbrowserlauncher-java -- ROM;obsolete;rc-buggy
Bug #859005 [ftp.debian.org] libbrowserlauncher-java: properties file not 
included
Changed Bug title to 'RM: libbrowserlauncher-java -- ROM;obsolete;rc-buggy' 
from 'libbrowserlauncher-java: properties file not included'.
> severity -1 normal
Bug #859005 [ftp.debian.org] RM: libbrowserlauncher-java -- 
ROM;obsolete;rc-buggy
Severity set to 'normal' from 'serious'

-- 
859005: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859005
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: apache-log4j2: FTBFS: find: '/usr/share/maven-repo/org/codehaus/plexus/plexus-containers/*/*.jar': No such file or directory

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 src:conversant-disruptor
Bug #869002 [src:apache-log4j2] apache-log4j2: FTBFS: find: 
'/usr/share/maven-repo/org/codehaus/plexus/plexus-containers/*/*.jar': No such 
file or directory
Bug reassigned from package 'src:apache-log4j2' to 'src:conversant-disruptor'.
No longer marked as found in versions apache-log4j2/2.8.2-1.
Ignoring request to alter fixed versions of bug #869002 to the same values 
previously set
> retitle -1 conversant-disruptor does not install the jar file
Bug #869002 [src:conversant-disruptor] apache-log4j2: FTBFS: find: 
'/usr/share/maven-repo/org/codehaus/plexus/plexus-containers/*/*.jar': No such 
file or directory
Changed Bug title to 'conversant-disruptor does not install the jar file' from 
'apache-log4j2: FTBFS: find: 
'/usr/share/maven-repo/org/codehaus/plexus/plexus-containers/*/*.jar': No such 
file or directory'.
> tags -1 pending
Bug #869002 [src:conversant-disruptor] conversant-disruptor does not install 
the jar file
Added tag(s) pending.

-- 
869002: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869002
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#877075: sikulix: hard coded dependency on libopencv2.4-java

[Debian Bug Tracking System]

Processing control commands:

> severity -1 serious
Bug #877075 [libsikulixapi-java] sikulix: hard coded dependency on 
libopencv2.4-java
Severity set to 'serious' from 'important'

-- 
877075: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877075
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#877073: sikulix: FTBFS with OpenCV 3.2

[Debian Bug Tracking System]

Processing control commands:

> severity -1 serious
Bug #877073 [src:sikulix] sikulix: FTBFS with OpenCV 3.2
Severity set to 'serious' from 'important'

-- 
877073: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877073
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: doxia-sitetools: FTBFS due to missing build dependencies

[Debian Bug Tracking System]

Processing control commands:

> severity -1 normal
Bug #875948 [src:doxia-sitetools] doxia-sitetools: FTBFS due to missing build 
dependencies
Severity set to 'normal' from 'serious'
> tags -1 moreinfo
Bug #875948 [src:doxia-sitetools] doxia-sitetools: FTBFS due to missing build 
dependencies
Added tag(s) moreinfo.

-- 
875948: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875948
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#857464: openjfx: FTBFS - Execution failed for task ':web:compileNativeLinux'

[Debian Bug Tracking System]

Processing control commands:

> severity -1 important
Bug #857464 [src:openjfx] openjfx: FTBFS - Execution failed for task 
':web:compileNativeLinux'
Severity set to 'important' from 'serious'

-- 
857464: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857464
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#877626: netbeans: Does not recognize Maven projects

[Debian Bug Tracking System]

Processing control commands:

> severity -1 wishlist
Bug #877626 [netbeans] netbeans: Does not recognize Maven projects
Severity set to 'wishlist' from 'normal'
> retitle -1 netbeans: Support Maven projects out-of-the-box
Bug #877626 [netbeans] netbeans: Does not recognize Maven projects
Changed Bug title to 'netbeans: Support Maven projects out-of-the-box' from 
'netbeans: Does not recognize Maven projects'.

-- 
877626: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877626
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: tomcat8.0_8.0.46-1_amd64.changes REJECTED

[Timo Aaltonen]

On 01.10.2017 12:00, Chris Lamb wrote:
> 
> Hi,
> 
> Seems like d/cpoyright needs updating; missing attributions for (at least) 
> Mort
> Bay Consulting, Dojo Foundation, etc. etc (I stopped looking there.)
> 
>  -- Chris Lamb   Sun, 01 Oct 2017 08:41:22 +

For what it's worth, those were also on the original NOTICE file since
tomcat8 was packaged.. funny that it got accepted back then.

anyway, new version uploaded


-- 
t

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#874276: ca-certificates-java: fails to install on armhf: Error: missing `server' JVM at `/usr/lib/jvm/java-8-openjdk-armhf/jre/lib/arm/server/libjvm.so'

[Debian Bug Tracking System]

Processing control commands:

> reopen -1
Bug #874276 {Done: Rico Tzschichholz <ric...@ubuntu.com>} 
[ca-certificates-java] ca-certificates-java: fails to install on armhf: Error: 
missing `server' JVM at 
`/usr/lib/jvm/java-8-openjdk-armhf/jre/lib/arm/server/libjvm.so'
Bug #874434 {Done: Rico Tzschichholz <ric...@ubuntu.com>} 
[ca-certificates-java] openjdk-8-jre-headless: uninstallable on armhf
'reopen' may be inappropriate when a bug has been closed with a version;
all fixed versions will be cleared, and you may need to re-add them.
Bug reopened
No longer marked as fixed in versions ca-certificates-java/20170929.
No longer marked as fixed in versions ca-certificates-java/20170929.

-- 
874276: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874276
874434: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874434
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: ca-certificates-java: fails to install on armhf: Error: missing `server' JVM at `/usr/lib/jvm/java-8-openjdk-armhf/jre/lib/arm/server/libjvm.so'

[Debian Bug Tracking System]

Processing control commands:

> tags -1 patch pending
Bug #874276 [ca-certificates-java] ca-certificates-java: fails to install on 
armhf: Error: missing `server' JVM at 
`/usr/lib/jvm/java-8-openjdk-armhf/jre/lib/arm/server/libjvm.so'
Bug #874434 [ca-certificates-java] openjdk-8-jre-headless: uninstallable on 
armhf
Added tag(s) patch and pending.
Added tag(s) patch and pending.

-- 
874276: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874276
874434: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874434
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed (with 1 error): Re: libsurefire-java: Please package libsurefire 2.2.0

[Debian Bug Tracking System]

Processing control commands:

> fixed 2.20-1
Unknown command or malformed arguments to command.

> close -1
Bug #867744 [libsurefire-java] libsurefire-java: Please package libsurefire 
2.2.0
Marked Bug as done

-- 
867744: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867744
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#876189: honor dpkg-statsoverride in postinst

[Debian Bug Tracking System]

Processing control commands:

> severity -1 wishlist
Bug #876189 [tomcat8] honor dpkg-statsoverride in postinst
Severity set to 'wishlist' from 'normal'

-- 
876189: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876189
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#876184: pdfsam: Disable donation window, news, and ads for premiun features

[Debian Bug Tracking System]

Processing control commands:

> tags -1 wontfix
Bug #876184 [pdfsam] pdfsam: Disable donation window, news, and ads for premiun 
features
Added tag(s) wontfix.

-- 
876184: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876184
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: hibernate-validator: incomplete packaging, missing classes make r-deps unusable

[Debian Bug Tracking System]

Processing control commands:

> tags -1 pending
Bug #874579 [libhibernate-validator-java] hibernate-validator: incomplete 
packaging, missing classes make r-deps unusable
Added tag(s) pending.

-- 
874579: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874579
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Fwd: Re: ca-certificates-java: fails to install on armhf: Error: missing `server' JVM at `/usr/lib/jvm/java-8-openjdk-armhf/jre/lib/arm/server/libjvm.so'

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> severity 874437 normal
Bug #874437 [mirrors] Debian mirror ftp.metu.edu.tr: no tracefile, sync script?
Severity set to 'normal' from 'grave'
> severity 874434 grave
Bug #874434 [ca-certificates-java] openjdk-8-jre-headless: uninstallable on 
armhf
Bug #874276 [ca-certificates-java] ca-certificates-java: fails to install on 
armhf: Error: missing `server' JVM at 
`/usr/lib/jvm/java-8-openjdk-armhf/jre/lib/arm/server/libjvm.so'
Severity set to 'grave' from 'serious'
Severity set to 'grave' from 'serious'
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
874276: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874276
874434: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874434
874437: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874437
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: FTBFS with Java 9 due to Terrible Swing

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> forwarded 873224 https://sourceforge.net/p/sweethome3d/bugs/783/
Bug #873224 [src:sweethome3d] FTBFS with Java 9 due to Terrible Swing
Set Bug forwarded-to-address to 
'https://sourceforge.net/p/sweethome3d/bugs/783/'.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
873224: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873224
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: doxia-sitetools: FTBFS due to missing build dependencies

[Debian Bug Tracking System]

Processing control commands:

> tags -1 patch
Bug #875948 [src:doxia-sitetools] doxia-sitetools: FTBFS due to missing build 
dependencies
Added tag(s) patch.

-- 
875948: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875948
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#874494: rebuilding libsambox-java generates unmet dependency on libsejda-io-java (>= 1.1.3.RELEASE)

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 libsejda-io-java
Bug #874494 [src:libsambox-java] rebuilding libsambox-java generates unmet 
dependency on libsejda-io-java (>= 1.1.3.RELEASE)
Bug reassigned from package 'src:libsambox-java' to 'libsejda-io-java'.
No longer marked as found in versions libsambox-java/1.0.34-1.
Ignoring request to alter fixed versions of bug #874494 to the same values 
previously set
> affects -1 libsambox-java
Bug #874494 [libsejda-io-java] rebuilding libsambox-java generates unmet 
dependency on libsejda-io-java (>= 1.1.3.RELEASE)
Added indication that 874494 affects libsambox-java
> tags -1 + patch
Bug #874494 [libsejda-io-java] rebuilding libsambox-java generates unmet 
dependency on libsejda-io-java (>= 1.1.3.RELEASE)
Added tag(s) patch.

-- 
874494: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874494
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#874494: rebuilding libsambox-java generates unmet dependency on libsejda-io-java (>= 1.1.3.RELEASE)

[Debian Bug Tracking System]

Processing control commands:

> tags -1 -patch
Bug #874494 [src:libsambox-java] rebuilding libsambox-java generates unmet 
dependency on libsejda-io-java (>= 1.1.3.RELEASE)
Removed tag(s) patch.

-- 
874494: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874494
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#874494: rebuilding libsambox-java generates unmet dependency on libsejda-io-java (>= 1.1.3.RELEASE)

[Debian Bug Tracking System]

Processing control commands:

> tags -1 patch
Bug #874494 [src:libsambox-java] rebuilding libsambox-java generates unmet 
dependency on libsejda-io-java (>= 1.1.3.RELEASE)
Added tag(s) patch.

-- 
874494: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874494
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#873962: sweethome3d: Random crash when opening/manipulating a file

[Debian Bug Tracking System]

Processing control commands:

> severity -1 important
Bug #873962 [sweethome3d] sweethome3d: Random crash when opening/manipulating a 
file
Severity set to 'important' from 'grave'

-- 
873962: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873962
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#873828: maven-compiler-plugin FTBFS: artifact org.codehaus.plexus:plexus-component-annotations:jar:debian has not been downloaded

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 libmaven-plugin-tools-java
Bug #873828 {Done: Emmanuel Bourg } 
[src:maven-compiler-plugin] maven-compiler-plugin FTBFS: artifact 
org.codehaus.plexus:plexus-component-annotations:jar:debian has not been 
downloaded
Bug reassigned from package 'src:maven-compiler-plugin' to 
'libmaven-plugin-tools-java'.
No longer marked as found in versions maven-compiler-plugin/3.6.2-1.
No longer marked as fixed in versions maven-plugin-tools/3.5-5.
> affects -1 maven-compiler-plugin
Bug #873828 {Done: Emmanuel Bourg } 
[libmaven-plugin-tools-java] maven-compiler-plugin FTBFS: artifact 
org.codehaus.plexus:plexus-component-annotations:jar:debian has not been 
downloaded
Added indication that 873828 affects maven-compiler-plugin

-- 
873828: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873828
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: pantomime-clojure_2.1.0-1_amd64.changes REJECTED

[Apollon Oikonomopoulos]

Hi Thorsten,

On 18:00 Mon 21 Aug , Thorsten Alteholz wrote:
> 
> Hi Apollon,
> 
> please mention Dean Edwards and Sam Stephenson with their mootools license in 
> your debian/copyright.

Fixed (N.B: AFAIU Dean and Sam are not related to mootools). I also 
realised test/resources contained a lot of non-DFSG-free stuff and 
repacked the source to remove it.

Regards,
Apollon

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[Emmanuel Bourg]

Le 27/08/2017 à 18:48, Thorsten Alteholz a écrit :

> ok, but this seems to be wrong. If scala-tools-sbinary really is the
> last package, it must not contain any binary jar files but could use
> packages from the archive, right?

My understanding it that it's actually the last dependency required
before we can start removing the binaries from the other sbt related
packages.


> I just had a quick lock at the embedded org.beanshell
> and didn't find any dependency on sbt for that tool. So at least this
> jar file could be handled better. While talking about beanshell, the
> sources on github contain files under a BSD-license. In your
> debian/copyright you just mention the Apache license and one copyright
> holder for it. There seems to be much room for improvement in your
> debian/copyright. Luckily bsh in version 2.04b is already in Debian and
> the debian/copyright of this package says it is under LGPL. I am sorry,
> but your debian/copyright is a mess and it does not help that there are
> lots of binary blobs included.
> Further there is CVE-2016-2510, which is fixed in 2.0b6 and not in your
> embedded version 2.0b4.

FWIW, the beanshell 2.0b4 vs 2.0b6 issue has been discussed in #700610.
beanshell isn't to blame for the vulnerability, it's a common issue
affecting Java applications deserializing untrusted data without
sanitizing it. sbt is most certainly not affected by this.

That said, I agree the beanshell jar was probably not necessary in the
bootstrap tarball.


> From my point of view scala-tools-sbinary can not be accepted yet.

Assuming we get debian/copyright in a better shape and remove the
binaries already packaged from the tarball, it is ok to upload
scala-tools-sbinary to main to complete the bootstrapping?

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[Thorsten Alteholz]

Hi Tony et al.,

On Sun, 27 Aug 2017, tony mancill wrote:

I was in fact inferring some special
(but temporary) dispensation for these packages because my understanding
is that it won't be possible to build SBT from source until the entire
set of related packages is in the archive, and SBT is required for some
of the builds. scala-tools-sbinary is the last of that set.


ok, but this seems to be wrong. If scala-tools-sbinary really is the last 
package, it must not contain any binary jar files but could use packages 
from the archive, right? So why aren't those other packages uploaded 
first? I just had a quick lock at the embedded org.beanshell and didn't 
find any dependency on sbt for that tool. So at least this jar file could 
be handled better. While talking about beanshell, the sources on github 
contain files under a BSD-license. In your debian/copyright you just 
mention the Apache license and one copyright holder for it. There seems 
to be much room for improvement in your debian/copyright. Luckily bsh 
in version 2.04b is already in Debian and the debian/copyright of this 
package says it is under LGPL. I am sorry, but your debian/copyright is 
a mess and it does not help that there are lots of binary blobs included.
Further there is CVE-2016-2510, which is fixed in 2.0b6 and not in your 
embedded version 2.0b4.



Is the acceptance of scala-tools-sbinary something that the FTP Masters
would be willing to discuss?



From my point of view scala-tools-sbinary can not be accepted yet.


  Thorsten


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[Thorsten Alteholz]

On Sun, 27 Aug 2017, Emmanuel Bourg wrote:


Would it be ok to target non-free instead of main until the


even in non-free the debian/copyright has to have the correct contents.

bootstrapping is complete and the binaries removed from the source 

tarballs?

Hmm, this will result in sbt being in non-free. How will you proceed to
main? Something in main must not depend on something in non-free, so a
main-sbt can not be build by non-free-sbt.

  Thorsten




__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[Emmanuel Bourg]

Would it be ok to target non-free instead of main until the
bootstrapping is complete and the binaries removed from the source tarballs?

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[tony mancill]

On Sun, Aug 27, 2017 at 06:49:35AM -0700, Chris Lamb wrote:
> Hi Andreas, 
> 
> > > > I'm confused about this package being rejected when a number of other
> > > > packages constructed in exactly the same manner were accepted in April.
> > > 
> > > This could have been a mistake rather than an expression of a policy... 
> > > :) 
> > 
> > As far as I understood it was not done by mistake
> 
> (*I* could have accepted the package by accident so inferring anything from 
> previous processing of packages could be misleading...) 

Hi Chris,

Thank you for your response. I wasn't involved with the initial set of
uploads (but am intending to help get SBT into buster), so I might not
have the complete story. I was in fact inferring some special
(but temporary) dispensation for these packages because my understanding
is that it won't be possible to build SBT from source until the entire
set of related packages is in the archive, and SBT is required for some
of the builds. scala-tools-sbinary is the last of that set.

Once we have the full complement in the archive, we will have the
necessary tool chain to start picking apart the bootstrapdeps
components. Frederic does a better job of describing it here [1].

My apologies (also to Thorsten) if my initial question came across as
testy. The first set of uploads was in mid-April, and
scala-tools-sbinary isn't obviously connected with that set.

Is the acceptance of scala-tools-sbinary something that the FTP Masters
would be willing to discuss?

Cheers,
tony

[1] https://lists.debian.org/debian-java/2017/08/msg00092.html


signature.asc
Description: PGP signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[Chris Lamb]

Hi Andreas, 

> > > I'm confused about this package being rejected when a number of other
> > > packages constructed in exactly the same manner were accepted in April.
> > 
> > This could have been a mistake rather than an expression of a policy... :) 
> 
> As far as I understood it was not done by mistake

(*I* could have accepted the package by accident so inferring anything from 
previous processing of packages could be misleading...) 


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[Andreas Tille]

Hi Chris and Thorsten,

On Sat, Aug 26, 2017 at 08:47:28PM -0700, Chris Lamb wrote:
> Tony, 
> 
> > I'm confused about this package being rejected when a number of other
> > packages constructed in exactly the same manner were accepted in April.
> 
> This could have been a mistake rather than an expression of a policy... :) 

As far as I understood it was not done by mistake but as a consequence
of previous discussion of the bootstraping process.  Frédéric, could you
please give some pointers to clarify the issue?

Kind regards

  Andreas.

-- 
http://fam-tille.de

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[Chris Lamb]

Tony, 

> I'm confused about this package being rejected when a number of other
> packages constructed in exactly the same manner were accepted in April.

This could have been a mistake rather than an expression of a policy... :) 


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: scala-tools-sbinary_0.4.2+2.11.M5-1_amd64.changes REJECTED

[tony mancill]

On Sat, Aug 26, 2017 at 11:00:10AM +, Thorsten Alteholz wrote:
> 
> Hi Frédér,
> 
> your package seems to consist mostly of jar files without the corresponding 
> sources. So I am afraid I have to reject it.
> 
>   Thorsten
> 
> 
> 
> ===
> 
> Please feel free to respond to this email if you don't understand why
> your files were rejected, or if you upload new files which address our
> concerns.

Hi Thorsten,

I'm confused about this package being rejected when a number of other
packages constructed in exactly the same manner were accepted in April.
Just a couple examples are [1] and [2], all part of a bootstrapping
effort for SBT [3]. If it helps, Frederic and I were recently
discussing the composition of the packages in [4].  

I believe the packages were accepted by Chris Lamb, although I cannot
find a record of this in the archives. (Is the acceptance of packages in
NEW logged aside from what is visible in the tracker.d.o/news links?)

It would be helpful to get some clarification from the FTP Masters
regarding the guidelines for the bootstrapping of SBT.

Thank you,
tony

[1] https://tracker.debian.org/news/843597
[2] https://tracker.debian.org/news/843599
[3] https://lists.debian.org/debian-java/2017/04/msg00014.html
[4] https://lists.debian.org/debian-java/2017/08/msg00092.html


signature.asc
Description: PGP signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: [maven-bundle-plugin] 02/03: Update copyright information

[Emmanuel Bourg]

Le 24/08/2017 à 18:48, Miguel Landaeta a écrit :

>  License: Apache-2.0
> + Licensed under the Apache License, Version 2.0 (the "License");
> + you may not use this file except in compliance with the License.
> + You may obtain a copy of the License at
> + .
> + http://www.apache.org/licenses/LICENSE-2.0
> + .
> + Unless required by applicable law or agreed to in writing, software
> + distributed under the License is distributed on an "AS IS" BASIS,
> + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
> + See the License for the specific language governing permissions and
> + limitations under the License.
> + .
>   On Debian GNU/Linux system you can find the complete text of the
> - Apache-2.0 license in '/usr/share/common-licenses/Apache-2.0'
> + Apache-2.0 license in '/usr/share/common-licenses/Apache-2.0'.

I don't think we need to repeat the license header in debian/copyright
for the Apache-2.0 license. Unlike the (L)GPL the Apache-2.0 header
doesn't add any information not found in the license text, like the "or
later version" clause.

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: activemq_5.14.5-3_amd64.changes REJECTED

[tony mancill]

On Mon, Aug 21, 2017 at 04:34:02AM +, Debian FTP Masters wrote:
> activemq_5.14.5-3.dsc: Invalid size hash for activemq_5.14.5.orig.tar.xz:
> According to the control file the size hash should be 2611308,
> but activemq_5.14.5.orig.tar.xz has 2631428.
> 
> If you did not include activemq_5.14.5.orig.tar.xz in your upload, a 
> different version
> might already be known to the archive software.

Hmm... I'll fix-up what is stored in pristine-tar.


signature.asc
Description: PGP signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#814176: Bug#793492: Bug#814176: azureus: (Build-)Depends on OpenJDK 7

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> reassign 870987 ftp.debian.org
Bug #870987 [src:azureus] azureus: should azureus be removed from unstable?
Bug reassigned from package 'src:azureus' to 'ftp.debian.org'.
Ignoring request to alter found versions of bug #870987 to the same values 
previously set
Ignoring request to alter fixed versions of bug #870987 to the same values 
previously set
> retitle 870987 RM: azureus -- RoQA; missed both jessie and stretch
Bug #870987 [ftp.debian.org] azureus: should azureus be removed from unstable?
Changed Bug title to 'RM: azureus -- RoQA; missed both jessie and stretch' from 
'azureus: should azureus be removed from unstable?'.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
870987: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870987
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#869020: logback: FTBFS: find: '/usr/share/maven-repo/org/codehaus/plexus/plexus-containers/*/*.jar': No such file or directory

[Debian Bug Tracking System]

Processing control commands:

> tags -1 unreproducible moreinfo
Bug #869020 [src:logback] logback: FTBFS: find: 
'/usr/share/maven-repo/org/codehaus/plexus/plexus-containers/*/*.jar': No such 
file or directory
Added tag(s) moreinfo and unreproducible.
> severity -1 normal
Bug #869020 [src:logback] logback: FTBFS: find: 
'/usr/share/maven-repo/org/codehaus/plexus/plexus-containers/*/*.jar': No such 
file or directory
Severity set to 'normal' from 'serious'

-- 
869020: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869020
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#871328: jakarta-jmeter: FTBFS: /<>/build.xml:1157: Cannot find required classes

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 libhtmlparser-java 1.6.20060610.dfsg0-6
Bug #871328 {Done: Emmanuel Bourg } [src:jakarta-jmeter] 
jakarta-jmeter: FTBFS: /<>/build.xml:1157: Cannot find required 
classes
Bug reassigned from package 'src:jakarta-jmeter' to 'libhtmlparser-java'.
No longer marked as found in versions jakarta-jmeter/2.13-3.
No longer marked as fixed in versions libhtmlparser-java/1.6.20060610.dfsg0-7.
Bug #871328 {Done: Emmanuel Bourg } [libhtmlparser-java] 
jakarta-jmeter: FTBFS: /<>/build.xml:1157: Cannot find required 
classes
Marked as found in versions libhtmlparser-java/1.6.20060610.dfsg0-6.
> affects -1 jakarta-jmeter
Bug #871328 {Done: Emmanuel Bourg } [libhtmlparser-java] 
jakarta-jmeter: FTBFS: /<>/build.xml:1157: Cannot find required 
classes
Added indication that 871328 affects jakarta-jmeter

-- 
871328: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871328
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#870388: animal-sniffer: FTBFS

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 debhelper 10.7.1
Bug #870388 [src:animal-sniffer] animal-sniffer: FTBFS
Bug reassigned from package 'src:animal-sniffer' to 'debhelper'.
No longer marked as found in versions animal-sniffer/1.15-2.
Ignoring request to alter fixed versions of bug #870388 to the same values 
previously set
Bug #870388 [debhelper] animal-sniffer: FTBFS
Marked as found in versions debhelper/10.7.1.
> affects -1 src:animal-sniffer
Bug #870388 [debhelper] animal-sniffer: FTBFS
Added indication that 870388 affects src:animal-sniffer
> forcemerge 870339 870388
Bug #870339 [debhelper] animal-sniffer FTBFS: recipe for target 'clean' failed
Bug #870388 [debhelper] animal-sniffer: FTBFS
Removed indication that 870388 affects src:animal-sniffer
Added indication that 870388 affects 
src:freehep-chartableconverter-plugin,src:animal-sniffer,src:clojure-maven-plugin
Merged 870339 870388

-- 
870339: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870339
870388: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870388
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#870339: animal-sniffer FTBFS: recipe for target 'clean' failed

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 debhelper 10.7.1
Bug #870339 [src:animal-sniffer] animal-sniffer FTBFS: recipe for target 
'clean' failed
Bug reassigned from package 'src:animal-sniffer' to 'debhelper'.
No longer marked as found in versions animal-sniffer/1.15-2.
Ignoring request to alter fixed versions of bug #870339 to the same values 
previously set
Bug #870339 [debhelper] animal-sniffer FTBFS: recipe for target 'clean' failed
Marked as found in versions debhelper/10.7.1.
> affects -1 src:animal-sniffer
Bug #870339 [debhelper] animal-sniffer FTBFS: recipe for target 'clean' failed
Added indication that 870339 affects src:animal-sniffer

-- 
870339: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870339
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#869363: gradle-helper-plugin: Incorrect usage of doit_in_builddir in gradle.pm (Debhelper Buildsystem)

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> reassign 869363 gradle-debian-helper 1.5.1
Bug #869363 [gradle-helper-plugin] gradle-helper-plugin: Incorrect usage of 
doit_in_builddir in gradle.pm (Debhelper Buildsystem)
Warning: Unknown package 'gradle-helper-plugin'
Bug reassigned from package 'gradle-helper-plugin' to 'gradle-debian-helper'.
No longer marked as found in versions 1.5.1.
Ignoring request to alter fixed versions of bug #869363 to the same values 
previously set
Bug #869363 [gradle-debian-helper] gradle-helper-plugin: Incorrect usage of 
doit_in_builddir in gradle.pm (Debhelper Buildsystem)
Marked as found in versions gradle-debian-helper/1.5.1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
869363: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869363
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Bug#869363: gradle-helper-plugin: Incorrect usage of doit_in_builddir in gradle.pm (Debhelper Buildsystem)

[Adrian Bunk]

reassign 869363 gradle-debian-helper 1.5.1
thanks

On Sat, Jul 22, 2017 at 07:14:11PM +0200, Niels Thykier wrote:
> Package: gradle-helper-plugin
> Version: 1.5.1
> Severity: important
> 
> Hi,
> 
> There is bug in gradle.pm that is hidden by bug in Dh_lib.  I intend
> to fix the latter soon, which will cause issues in gradle.pm once that
> happens.  This bug is here:
> 
> 
> > sub clean {
> > my $this=shift;
> > 
> > $this->doit_in_builddir("find . -wholename .*build/tmp | xargs echo | 
> > sed -e 's^build/tmp^build^g' | xargs rm -Rf");
> 
> ^^
> > $this->doit_in_builddir("find . -wholename .*build/debian | xargs echo 
> > | sed -e 's^build/tmp^build^g' | xargs rm -Rf");
> 
> ^
> > $this->doit_in_builddir("rm", "-Rf", "$this->{cwd}/.gradle", 
> > "$this->{cwd}/buildSrc/.gradle", ".m2");
> > }
> 
> 
> The "doit_in_builddir" method calls "print_and_doit", which in turn
> calls "doit".  The API of doit intends for it to *not* fork a shell,
> but the above only works in a shell call.
> 
> I will introduce a "complex_doit_in_builddir" in debhelper/10.7, which
> you can use instead.  You should be able to support both the new call
> plus work with older versions of debhelper by relying on "can" a la:
> 
> """
>   if ($this->can('complex_doit_in_builddir')) {
> $this->complex_doit_in_builddir(...);
> $this->complex_doit_in_builddir(...);
>   } else {
> $this->doit_in_builddir(...);
> $this->doit_in_builddir(...);
>   }
> """
> 
> Thanks,
> ~Niels


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#869361: maven-bundle-plugin: FTBFS after maven-archive 3.1.1 update

[Debian Bug Tracking System]

Processing control commands:

> block 869018 with 869361
Bug #869018 [src:easymock] easymock: FTBFS: find: 
'/usr/share/maven-repo/org/codehaus/plexus/plexus-containers/*/*.jar': No such 
file or directory
869018 was not blocked by any bugs.
869018 was not blocking any bugs.
Added blocking bug(s) of 869018: 869361

-- 
869018: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869018
869361: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869361
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: libpdfbox2-java and libpdfbox-java: error when trying to install together

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> reassign 869158 libpdfbox2-java
Bug #869158 [libpdfbox-java,libpdfbox2-java] libpdfbox2-java and 
libpdfbox-java: error when trying to install together
Bug reassigned from package 'libpdfbox-java,libpdfbox2-java' to 
'libpdfbox2-java'.
Ignoring request to alter found versions of bug #869158 to the same values 
previously set
Ignoring request to alter fixed versions of bug #869158 to the same values 
previously set
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
869158: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869158
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: jruby: FTBFS: ERROR Manifest org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: {module-info.class=org.jruby.org.objectweb.asm.module-info}

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> notfound 868913 1.7.26-1
Bug #868913 [src:jruby] jruby: FTBFS: ERROR Manifest 
org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: 
{module-info.class=org.jruby.org.objectweb.asm.module-info}
No longer marked as found in versions jruby/1.7.26-1.
> reassign 868913 libmaven-bundle-plugin-java 2.5.4-3
Bug #868913 [src:jruby] jruby: FTBFS: ERROR Manifest 
org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: 
{module-info.class=org.jruby.org.objectweb.asm.module-info}
Bug reassigned from package 'src:jruby' to 'libmaven-bundle-plugin-java'.
Ignoring request to alter found versions of bug #868913 to the same values 
previously set
Ignoring request to alter fixed versions of bug #868913 to the same values 
previously set
Bug #868913 [libmaven-bundle-plugin-java] jruby: FTBFS: ERROR Manifest 
org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: 
{module-info.class=org.jruby.org.objectweb.asm.module-info}
Marked as found in versions maven-bundle-plugin/2.5.4-3.
> severity 868913 normal
Bug #868913 [libmaven-bundle-plugin-java] jruby: FTBFS: ERROR Manifest 
org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: 
{module-info.class=org.jruby.org.objectweb.asm.module-info}
Severity set to 'normal' from 'serious'
> tags 868913 + confirmed upstream
Bug #868913 [libmaven-bundle-plugin-java] jruby: FTBFS: ERROR Manifest 
org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: 
{module-info.class=org.jruby.org.objectweb.asm.module-info}
Added tag(s) upstream and confirmed.
> forwarded 868913 https://issues.apache.org/jira/browse/FELIX-5430
Bug #868913 [libmaven-bundle-plugin-java] jruby: FTBFS: ERROR Manifest 
org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: 
{module-info.class=org.jruby.org.objectweb.asm.module-info}
Set Bug forwarded-to-address to 
'https://issues.apache.org/jira/browse/FELIX-5430'.
> retitle 868913 libmaven-bundle-plugin-java: Unexpected error about classes 
> found in the wrong directory
Bug #868913 [libmaven-bundle-plugin-java] jruby: FTBFS: ERROR Manifest 
org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: 
{module-info.class=org.jruby.org.objectweb.asm.module-info}
Changed Bug title to 'libmaven-bundle-plugin-java: Unexpected error about 
classes found in the wrong directory' from 'jruby: FTBFS: ERROR Manifest 
org.jruby:jruby-complete:bundle:1.7.26 : Classes found in the wrong directory: 
{module-info.class=org.jruby.org.objectweb.asm.module-info}'.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
868913: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868913
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: not-yet-commons-ssl: FTBFS: error: package org.junit does not exist (patch)

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> tags 868903 patch
Bug #868903 [src:not-yet-commons-ssl] not-yet-commons-ssl: FTBFS: [javac] 
/<>/src/test/org/apache/commons/httpclient/contrib/ssl/TestHttpclientContrib.java:3:
 error: package org.junit does not exist
Added tag(s) patch.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
868903: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868903
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Reproducible NetBeans

[Emilian Bold]

Now that we are under Apache you might also try using our mailing
lists (eg. d...@netbeans.incubator.apache.org ) to discuss dependency
issues and such. Feel free to contact me directly too for build
problems, I might be able to help.

Once we start doing builds under Apache we could figure out how to
help Debian too. Using newer dependencies at least should be easy to
argue for.

The hg.netbeans.org/binaries "repository" will be decommissioned in
the future and we will get most of our dependencies from the Maven
repo. It probably doesn't help you much, but it should be more in line
with other Java projects.

If reproducible builds are about dh-strip-nondeterminism and
timestamps then I am good to go already with my own patch. (Well,
actually, there is another problem with some generated code that's not
deterministic but you probably didn't run into that since you aren't
including all the modules).


--emi


On Fri, Jul 14, 2017 at 12:22 AM, Markus Koschany  wrote:
> Hello,
>
> Am 13.07.2017 um 19:41 schrieb Emilian Bold:
>> Hello,
>>
>> I knew about reproducible-builds.org but I had no idea you are
>> building NetBeans too
>> https://tests.reproducible-builds.org/debian/rb-pkg/stretch/amd64/netbeans.html
>>
>> Which seems to be failing at the moment.
>
> Netbeans is currently maintained by Debian's Java team but I am more or
> less the sole human maintainer. You will find more useful information
> and links about Netbeans in Debian at
> https://tracker.debian.org/pkg/netbeans .
> The reproducible builds effort is coordinated by the Reproducible builds
> team. [1] I suggest to join their mailing list or IRC channel if you are
> interested in this topic. They will surely help you to get a
> reproducible build environment running. See also [2] for more links.
>
>> I've also looked into reproducible builds for Apache NetBeans a while
>> back and have a draft patch prepared for when we start doing builds
>> under Apache (see
>> https://github.com/emilianbold/reproducible-nextbeans/commits/master )
>>
>> So, do you need any help? Do you have patches I could integrate upstream?
>>
>> I'm looking at 
>> https://sources.debian.net/src/netbeans/8.1%2Bdfsg3-2/debian/patches/reproducible-build.patch/
>> and the reproducible patch is very small.
>
> The reproducible-build.patch is straightforward. In general I suggest
> you should prune Netbeans of any timestamps. In this case I chose a
> fixed date for the installation time but I'm sure there is a better
> solution. There are more issues with embedded timestamps in zip files
> but I haven't started to work on it.
>
> I would gladly accept help and recommendations how to maintain Netbeans
> for Debian long term. We are the only Linux distribution that provides a
> self-contained build of Netbeans. As you can see at [3] we carry a lot
> of patches despite the fact that we only build the basic cluster, the
> core of Netbeans. Most issues stem from using Debian packages for
> building Netbeans instead of downloading them from your repository. All
> patches that are prefixed with netbeans-* either deal with disabling
> downloads from untrusted sources or fixing build failures due to
> unavailable build-dependencies. The third category of patches deals with
> incompatibilities between different versions of dependencies. Sometimes
> we ship older packages but often also newer ones and the patches try to
> fix or work around those discrepancies.
>
> So in short: I believe most of them are Debian specific unless you
> completely change your build system.
>
>> I assume you also apply strip-nondeterminism on the output archives?
>
> Yes, that's correct. However this tool is part of
> dh-strip-nondeterminism [4] which is automatically called by dh, a core
> tool of debhelper which is used by the majority of all Debian packages.
> It is not specific to Debian's Netbeans package.
>
>> I would also appreciate a quickstart on getting the Debian
>> reproducible build environment setup on a machine so I can test it
>> myself.
>
> As previously suggested I would ask the reproducible builds team for
> help here. [1]
>
> Regards,
>
> Markus
>
>> This is the maintainer address of Debian's Java team
>> .
>>  Please use
>> debian-j...@lists.debian.org for discussions and questions.
>>
>
> [1] https://wiki.debian.org/ReproducibleBuilds/Contribute
> [2] https://wiki.debian.org/ReproducibleBuilds
> [3]
> https://anonscm.debian.org/cgit/pkg-java/netbeans.git/tree/debian/patches
> [4] https://tracker.debian.org/pkg/strip-nondeterminism
>

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Reproducible NetBeans

[Markus Koschany]

Hello,

Am 13.07.2017 um 19:41 schrieb Emilian Bold:
> Hello,
> 
> I knew about reproducible-builds.org but I had no idea you are
> building NetBeans too
> https://tests.reproducible-builds.org/debian/rb-pkg/stretch/amd64/netbeans.html
> 
> Which seems to be failing at the moment.

Netbeans is currently maintained by Debian's Java team but I am more or
less the sole human maintainer. You will find more useful information
and links about Netbeans in Debian at
https://tracker.debian.org/pkg/netbeans .
The reproducible builds effort is coordinated by the Reproducible builds
team. [1] I suggest to join their mailing list or IRC channel if you are
interested in this topic. They will surely help you to get a
reproducible build environment running. See also [2] for more links.

> I've also looked into reproducible builds for Apache NetBeans a while
> back and have a draft patch prepared for when we start doing builds
> under Apache (see
> https://github.com/emilianbold/reproducible-nextbeans/commits/master )
> 
> So, do you need any help? Do you have patches I could integrate upstream?
> 
> I'm looking at 
> https://sources.debian.net/src/netbeans/8.1%2Bdfsg3-2/debian/patches/reproducible-build.patch/
> and the reproducible patch is very small.

The reproducible-build.patch is straightforward. In general I suggest
you should prune Netbeans of any timestamps. In this case I chose a
fixed date for the installation time but I'm sure there is a better
solution. There are more issues with embedded timestamps in zip files
but I haven't started to work on it.

I would gladly accept help and recommendations how to maintain Netbeans
for Debian long term. We are the only Linux distribution that provides a
self-contained build of Netbeans. As you can see at [3] we carry a lot
of patches despite the fact that we only build the basic cluster, the
core of Netbeans. Most issues stem from using Debian packages for
building Netbeans instead of downloading them from your repository. All
patches that are prefixed with netbeans-* either deal with disabling
downloads from untrusted sources or fixing build failures due to
unavailable build-dependencies. The third category of patches deals with
incompatibilities between different versions of dependencies. Sometimes
we ship older packages but often also newer ones and the patches try to
fix or work around those discrepancies.

So in short: I believe most of them are Debian specific unless you
completely change your build system.

> I assume you also apply strip-nondeterminism on the output archives?

Yes, that's correct. However this tool is part of
dh-strip-nondeterminism [4] which is automatically called by dh, a core
tool of debhelper which is used by the majority of all Debian packages.
It is not specific to Debian's Netbeans package.

> I would also appreciate a quickstart on getting the Debian
> reproducible build environment setup on a machine so I can test it
> myself.

As previously suggested I would ask the reproducible builds team for
help here. [1]

Regards,

Markus

> This is the maintainer address of Debian's Java team
> .
>  Please use
> debian-j...@lists.debian.org for discussions and questions.
> 

[1] https://wiki.debian.org/ReproducibleBuilds/Contribute
[2] https://wiki.debian.org/ReproducibleBuilds
[3]
https://anonscm.debian.org/cgit/pkg-java/netbeans.git/tree/debian/patches
[4] https://tracker.debian.org/pkg/strip-nondeterminism



signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed (with 1 error): Re: Bug#867538: fop: Please implement sidebars floating at the side of the body of the text

[Debian Bug Tracking System]

Processing control commands:

> reopen -1
Bug #867538 {Done: Mathieu Malaterre <ma...@debian.org>} [fop] fop: Please 
implement sidebars floating at the side of the body of the text
'reopen' may be inappropriate when a bug has been closed with a version;
all fixed versions will be cleared, and you may need to re-add them.
Bug reopened
No longer marked as fixed in versions fop/1:2.1-6.
> forward -1 https://issues.apache.org/jira/browse/FOP-2727
Unknown command or malformed arguments to command.


-- 
867538: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867538
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#867538: fop: Please implement sidebars floating at the side of the body of the text

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> forwarded 867538 https://issues.apache.org/jira/browse/FOP-2727
Bug #867538 [fop] fop: Please implement sidebars floating at the side of the 
body of the text
Set Bug forwarded-to-address to 
'https://issues.apache.org/jira/browse/FOP-2727'.
>
End of message, stopping processing here.

Please contact me if you need assistance.
-- 
867538: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867538
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: libfelix-bundlerepository-java: missing requirement osgi.wiring.package; (&(osgi.wiring.package=org.osgi.service.repository)(version>=1.0.0)(!(version>=1.1.0))))

[Debian Bug Tracking System]

Processing control commands:

> tags -1 confirmed
Bug #868074 [libfelix-bundlerepository-java] libfelix-bundlerepository-java: 
missing requirement osgi.wiring.package; 
(&(osgi.wiring.package=org.osgi.service.repository)(version>=1.0.0)(!(version>=1.1.0
Added tag(s) confirmed.

-- 
868074: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868074
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#867538: fop: Please implement sidebars floating at the side of the body of the text

[Debian Bug Tracking System]

Processing control commands:

> fixed -1 1:2.1-6
Bug #867538 [fop] fop: Please implement sidebars floating at the side of the 
body of the text
Marked as fixed in versions fop/1:2.1-6.

-- 
867538: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867538
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Google Analytics tracking in iText Javadocs

[Emmanuel Bourg]

Hi Amedee,

Thanks a lot for the heads up, we'll remove the patches when updating
the iText package to 5.5.12 or later.

Regards,

Emmanuel Bourg

Le 7/07/2017 à 14:17, Amedee Van Gasse a écrit :
> Hi,
> 
> I am sending you this email because you are a maintainer of the package
> libitext5-java.
> 
> I'd like to inform you that we (iText Software) have decided to remove
> all Google Analytics tracking from the iText Javadocs, starting from
> iText 5.5.12 which will be released mid-August 2017.
> 
> One of the motives was compliance with the GDPR directive - we can ask
> visitors permission on our own website itextpdf.com (which is a Drupal
> website, and has all of the requirements for the GDPR built-in) but we
> cannot do that as easy on a static Javadoc page. Additionally, when
> Javadoc is distributed to end users, and viewed on their local machine,
> then tracking is out of the question anyway.
> 
> So if you ever want to make a Debian package out of iText 5.5.12, then
> remove-javadoc-page-tracking.patch will no longer be required.
> 
> This is the commit that applies the change:
> https://github.com/itext/itextpdf/commit/ec2a56b4585740ae0335d1a3af11fb95c076615e
> 
> 
> Additionally, I also made a change so you no longer need to apply
> utf8.patch:
> https://github.com/itext/itextpdf/commit/db999c007b681684d51663fdc877974ba2a36e04
> 
> 
> iText 7 (current release: 7.0.3) didn't have Google Analytics tracking
> to start with, but that isn't available as a Debian package, so it's
> just FYI.
> 
> 
> If you have any other suggestions that can improve the packaging of
> iText for Debian, or anything else, then you can mail directly to me or
> mail to commun...@itextpdf.com.
> 
> Best regards,
> 


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: [maven-javadoc-plugin] 01/01: Try a different javadoc path on Java 9

[Emmanuel Bourg]

Le 5/07/2017 à 19:50, Chris West a écrit :

> ++// On Java 9, this has moved to: 
> /usr/lib/jvm/java-9-openjdk-amd64/bin/javadoc
> ++else if ( SystemUtils.IS_OS_MAC_OSX && 
> SystemUtils.JAVA_VERSION_FLOAT > 1.8f )
> ++{
> ++javadocExe =
> ++new File( SystemUtils.getJavaHome() + File.separator + 
> "bin", javadocCommand );
> ++}

Hi Chris,

Are you sure you want to restrict the alternative path to OS X ? ;)

Emmanuel

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#866845: libidw-java FTBFS: PropertyMapImpl.java:383: error: unmappable character for encoding ASCII

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 javahelper 0.60
Bug #866845 {Done: Emmanuel Bourg } [src:libidw-java] 
libidw-java FTBFS: PropertyMapImpl.java:383: error: unmappable character for 
encoding ASCII
Bug reassigned from package 'src:libidw-java' to 'javahelper'.
No longer marked as found in versions libidw-java/1.6.1-1.
No longer marked as fixed in versions javatools/0.61.
Bug #866845 {Done: Emmanuel Bourg } [javahelper] libidw-java 
FTBFS: PropertyMapImpl.java:383: error: unmappable character for encoding ASCII
Marked as found in versions javatools/0.60.
> affects -1 libidw-java
Bug #866845 {Done: Emmanuel Bourg } [javahelper] libidw-java 
FTBFS: PropertyMapImpl.java:383: error: unmappable character for encoding ASCII
Added indication that 866845 affects libidw-java

-- 
866845: bugs.debian.org/cgi-bin/bugreport.cgi?bug=866845
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#864405: CVE-2016-2666

[Debian Bug Tracking System]

Processing control commands:

> tags -1 -moreinfo
Bug #864405 [src:undertow] undertow: CVE-2017-2666 CVE-2017-2670
Removed tag(s) moreinfo.
> tags -1 pending
Bug #864405 [src:undertow] undertow: CVE-2017-2666 CVE-2017-2670
Added tag(s) pending.

-- 
864405: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864405
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#866128: closed by Markus Koschany <a...@debian.org> (Re: Bug#866128: tomcat 8 critical bug)

[Luigi Canali]

thank you!

On Tue, Jun 27, 2017 at 12:42 PM, Debian Bug Tracking System <
ow...@bugs.debian.org> wrote:

> This is an automatic notification regarding your Bug report
> which was filed against the tomcat8 package:
>
> #866128: tomcat 8 critical bug
>
> It has been closed by Markus Koschany <a...@debian.org>.
>
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact Markus Koschany <
> a...@debian.org> by
> replying to this email.
>
>
> --
> 866128: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866128
> Debian Bug Tracking System
> Contact ow...@bugs.debian.org with problems
>
>
> -- Forwarded message --
> From: Markus Koschany <a...@debian.org>
> To: Luigi Canali <lcan...@fedcms.com>
> Cc: 866128-d...@bugs.debian.org
> Bcc:
> Date: Tue, 27 Jun 2017 18:38:58 +0200
> Subject: Re: Bug#866128: tomcat 8 critical bug
> Version: 8.0.14-1+deb8u8
>
> Am 27.06.2017 um 18:09 schrieb Luigi Canali:
> > Package: tomcat8
> > Version: 8.0.14-1+deb8u5
> >
> > The current Jessie packages for Tomcat 8 has a bug that really should be
> > taken care of:
> >
> > https://bz.apache.org/bugzilla/show_bug.cgi?id=57544
> > <https://bz.apache.org/bugzilla/show_bug.cgi?id=57544>
> >
> > when this bug kicks in, the JVM starts stacking up threads to the point
> > where the machine becomes unusable - in essence a self-induced denial of
> > service.
> >
> > Fortunately the bug has been fixed in Tomcat 8.0.19 or later
> >
> > I'm requesting that tomcat 8 debian jessie packages get updated at least
> > to version 8.0.19.
>
> The current version of tomcat8 in Jessie is 8.0.14-1+deb8u10. This issue
> was fixed in +deb8u7 and +deb8u8.
>
> Markus
>
>
>
> -- Forwarded message --
> From: Luigi Canali <lcan...@fedcms.com>
> To: sub...@bugs.debian.org
> Cc:
> Bcc:
> Date: Tue, 27 Jun 2017 12:09:52 -0400
> Subject: tomcat 8 critical bug
> Package: tomcat8
> Version: 8.0.14-1+deb8u5
>
> The current Jessie packages for Tomcat 8 has a bug that really should be
> taken care of:
>
> https://bz.apache.org/bugzilla/show_bug.cgi?id=57544
>
> when this bug kicks in, the JVM starts stacking up threads to the point
> where the machine becomes unusable - in essence a self-induced denial of
> service.
>
> Fortunately the bug has been fixed in Tomcat 8.0.19 or later
>
> I'm requesting that tomcat 8 debian jessie packages get updated at least
> to version 8.0.19.
>
> thanks!
> Luigi
>
> --
>
>
>
> Luigi Canali, PMP, GSLC
> _
> FedCMS
> (301) 537-9009 - mobile
> (202) 318-7628 - fax
> lcan...@fedcms.com
> www.FedCMS.com
>
>
>
> __
>
> Confidentiality Notice: The information contained in this message is
> intended only for the use of the
> addressee, and should be considered confidential and/or privileged. If the
> reader of this message is not the intended recipient, or the employee or
> agent responsible to deliver it to the intended recipient, you are hereby
> notified that any dissemination, distribution or copying of this
> communication and its contents is strictly prohibited.  If you have
> received this communication in error, please notify the sender immediately.
> __
>
>
>
>


-- 



Luigi Canali, PMP, GSLC
_
FedCMS
(301) 537-9009 - mobile
(202) 318-7628 - fax
lcan...@fedcms.com
www.FedCMS.com



__

Confidentiality Notice: The information contained in this message is
intended only for the use of the
addressee, and should be considered confidential and/or privileged. If the
reader of this message is not the intended recipient, or the employee or
agent responsible to deliver it to the intended recipient, you are hereby
notified that any dissemination, distribution or copying of this
communication and its contents is strictly prohibited.  If you have
received this communication in error, please notify the sender immediately.
__
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#826257: Re%3A Bug#826257%3A jetty9%3A Installation fails "jetty9.pid exists%2C%0A but jetty was not running"

[Kai Michael Hamich]

Hi,

I had the same issue! Can you check your jetty log?

In my case jetty could not bind to port 8080, another deamon was running on 
the same port. Does 'netstat -tulpn | grep :8080' show another process bind to 
the port?

You can switch the port by changing the following line:

/etc/jetty9/start.ini:
jetty.port=8080

Maybe it solves your problem 

Best regards,

Kai

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#706333: sweethome3d: Walls or Rooms don't appear

[Debian Bug Tracking System]

Processing control commands:

> tags -1 moreinfo
Bug #706333 [sweethome3d] sweethome3d: Walls or Rooms don't appear
Added tag(s) moreinfo.

-- 
706333: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706333
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: 2 bugs

[Debian Bug Tracking System]

Processing control commands:

> tags -1 moreinfo
Bug #621464 [sweethome3d] sweethome3d: "Segmentation fault" on startup
Added tag(s) moreinfo.

-- 
621464: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621464
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Version 1.2 is out

[Debian Bug Tracking System]

Processing control commands:

> fixed -1 1.2-1
Bug #792130 {Done: Emmanuel Bourg } 
[libxml-commons-resolver1.1-java] Version 1.2 is out
Ignoring request to alter fixed versions of bug #792130 to the same values 
previously set
> close -1
Bug #792130 {Done: Emmanuel Bourg } 
[libxml-commons-resolver1.1-java] Version 1.2 is out
Bug 792130 is already marked as done; not doing anything.

-- 
792130: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792130
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Version 1.2 is out

[Debian Bug Tracking System]

Processing control commands:

> fixed -1 1.2-1
Bug #792130 [libxml-commons-resolver1.1-java] Version 1.2 is out
Marked as fixed in versions libxml-commons-resolver1.1-java/1.2-1.
> close -1
Bug #792130 [libxml-commons-resolver1.1-java] Version 1.2 is out
Marked Bug as done

-- 
792130: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792130
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Wheezy update of jetty?

[Niels Thykier]

Chris Lamb:
> Dear maintainer(s),
> 
> The Debian LTS team would like to fix the security issues which are
> currently open in the Wheezy version of jetty:
> https://security-tracker.debian.org/tracker/source-package/jetty
> 

Hi Chris,

As I recall, almost(?) all of the people you have explicitly Cc'ed are
inactive or no longer in the Java team (myself included).

I am bouncing this to debian-java@l.d.o to increase its visibility (from
memory, pkg-java-maintainers@l.a.d.o gets a lot of "automated" traffic
from bugs etc.)

Quoting the rest the rest of your mail for d-java. :)

Thanks,
~Niels

> Would you like to take care of this yourself?
> 
> If yes, please follow the workflow we have defined here:
> https://wiki.debian.org/LTS/Development
> 
> If that workflow is a burden to you, feel free to just prepare an
> updated source package and send it to debian-...@lists.debian.org
> (via a debdiff, or with an URL pointing to the source package,
> or even with a pointer to your packaging repository), and the members
> of the LTS team will take care of the rest. Indicate clearly whether you
> have tested the updated package or not.
> 
> If you don't want to take care of this update, it's not a problem, we
> will do our best with your package. Just let us know whether you would
> like to review and/or test the updated package before it gets released.
> 
> You can also opt-out from receiving future similar emails in your
> answer and then the LTS Team will take care of jetty updates
> for the LTS releases.
> 
> Thank you very much.
> 
> Chris Lamb,
>   on behalf of the Debian LTS team.
> 
> PS: A member of the LTS team might start working on this update at
> any point in time. You can verify whether someone is registered
> on this update in this file:
> https://anonscm.debian.org/viewvc/secure-testing/data/dla-needed.txt?view=markup
> 
> 
> Regards,
> 


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Bug#864597: upgrade-reports: jessie -> stretch: gnome fails to upgrade: cycle found while processing triggers

[Cyril Brulebois]

Emmanuel Bourg  (2017-06-15):
> Is this the only solution?

Probably not, but reverting the single change that triggered the
regression looks like a safe way to unbreak this situation. Especially
when the said change only happened many months after the relevant
package was removed from the archive (2017-05-31 vs. 2016-04-22)…

> That's a bit odd to retain the openjdk-7 dependency on
> ca-certificates-java and potentially stick with it forever.

This is incorrect. See my reply in:
  https://bugs.debian.org/864597#100

> Maybe we should simply remove the JRE dependency on
> ca-certificates-java and move the keystore generation to openjdk-8.
> That would also solve the circular dependency (#864657).

Tentative release date minus days isn't the time to deal with circular
dependencies IMHO.

> If you upload a NMU could you please push the changes to the Git
> repository?

Not possible since I'm not a member of pkg-java, and since you don't
seem to allow non-member access:
| $ git push origin HEAD $(git describe)
| Counting objects: 6, done.
| Delta compression using up to 4 threads.
| Compressing objects: 100% (6/6), done.
| Writing objects: 100% (6/6), 1.66 KiB | 0 bytes/s, done.
| Total 6 (delta 3), reused 0 (delta 0)
| remote: error: insufficient permission for adding an object to repository 
database ./objects
| remote: fatal: failed to write object
| error: unpack failed: unpack-objects abnormal exit
| To ssh://git.debian.org/git/pkg-java/ca-certificates-java.git
|  ! [remote rejected] HEAD -> master (unpacker error)
|  ! [remote rejected] debian/20170531+nmu1 -> debian/20170531+nmu1 (unpacker 
error)
| error: failed to push some refs to 
'ssh://git.debian.org/git/pkg-java/ca-certificates-java.git'

git format-patch -1 attached though.


KiBi.
From aff0969f1233ae2a60cd1d6679ce2abfe218facb Mon Sep 17 00:00:00 2001
From: Cyril Brulebois 
Date: Fri, 16 Jun 2017 08:01:25 +0200
Subject: [PATCH] Revert to depending on openjdk-7 instead of openjdk-8 (See:
 #864597).

This change triggered a failure to dist-upgrade, due to the triggers
loop.

The openjdk-7 package was dropped from stretch, but the
java7-runtime-headless alternative dependency is satisfied by openjdk-8.
---
 debian/changelog | 10 ++
 debian/rules |  4 ++--
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 7304327..8357713 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+ca-certificates-java (20170531+nmu1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Revert to depending on openjdk-7 instead of openjdk-8, since this triggers
+a failure to dist-upgrade, due to the triggers loop (See: #864597). The
+openjdk-7 package was dropped from stretch, but the java7-runtime-headless
+alternative dependency is satisfied by openjdk-8.
+
+ -- Cyril Brulebois   Thu, 15 Jun 2017 17:33:00 +0200
+
 ca-certificates-java (20170531) unstable; urgency=medium
 
   * Team upload.
diff --git a/debian/rules b/debian/rules
index 28363d3..8f78b46 100755
--- a/debian/rules
+++ b/debian/rules
@@ -6,11 +6,11 @@
 
 ifeq ($(shell dpkg-vendor --derives-from Ubuntu && echo yes),yes)
 	SUBSTVARS = -Vnss:Depends="libnss3 (>= 3.12.9+ckbi-1.82-0ubuntu3~)" \
--Vjre:Depends="openjdk-8-jre-headless"
+-Vjre:Depends="openjdk-7-jre-headless"
 	nss_lib = libnss3
 else
 	SUBSTVARS = -Vnss:Depends="libnss3 (>= 3.12.10-2~)" \
--Vjre:Depends="openjdk-8-jre-headless"
+-Vjre:Depends="openjdk-7-jre-headless"
 	nss_lib = libnss3
 endif
 
-- 
2.1.4



signature.asc
Description: Digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Bug#864597: upgrade-reports: jessie -> stretch: gnome fails to upgrade: cycle found while processing triggers

[Cyril Brulebois]

Emmanuel Bourg  (2017-06-15):
> If you upload a NMU could you please push the changes to the Git
> repository?

I'll look into this when I've slept a bit. Reminders/prods welcome.


KiBi.


signature.asc
Description: Digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Bug#864597: upgrade-reports: jessie -> stretch: gnome fails to upgrade: cycle found while processing triggers

[Emmanuel Bourg]

Le 15/06/2017 à 18:09, Cyril Brulebois a écrit :

> If all succeed, I intend to NMU ca-certificates-java with the attached
> changes. I could have reintroduced the old package, but I chose to retain
> the svn to git changes, and to drop the version for the openjdk-7 case,
> since even jessie had a higher version. Attached debdiffs against current
> version, and previous one.

Is this the only solution? That's a bit odd to retain the openjdk-7
dependency on ca-certificates-java and potentially stick with it
forever. Maybe we should simply remove the JRE dependency on
ca-certificates-java and move the keystore generation to openjdk-8. That
would also solve the circular dependency (#864657).

If you upload a NMU could you please push the changes to the Git repository?

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Bug#864597: upgrade-reports: jessie -> stretch: gnome fails to upgrade: cycle found while processing triggers

[Cyril Brulebois]

Cyril Brulebois  (2017-06-15):
> I was just saying this on IRC:
> 
> “should I try to reinstate ca-certificates-java's old dependencies and
> compare? from my initial bug report, that's the change in the archive
> that led to the regression.”
> 
> and mentioned earlier that given the old dependencies have an OR anyway,
> we shouldn't be introducing an uninstallable package. This would have
> the nice effect of being a solution that can be implemented in hours
> instead of days (given openjdk-8's build time). This doesn't mean we
> should jump the gun anyway…
> 
> I'll report back.

This is looking good so far: gnome upgrade path fixed, kde and xfce are
still looking good, and tests with other desktop tasks are still running.

If all succeed, I intend to NMU ca-certificates-java with the attached
changes. I could have reintroduced the old package, but I chose to retain
the svn to git changes, and to drop the version for the openjdk-7 case,
since even jessie had a higher version. Attached debdiffs against current
version, and previous one.


KiBi.
diff -Nru ca-certificates-java-20170531/debian/changelog ca-certificates-java-20170531+nmu1/debian/changelog
--- ca-certificates-java-20170531/debian/changelog	2017-05-31 15:02:23.0 +0200
+++ ca-certificates-java-20170531+nmu1/debian/changelog	2017-06-15 17:33:00.0 +0200
@@ -1,3 +1,13 @@
+ca-certificates-java (20170531+nmu1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Revert to depending on openjdk-7 instead of openjdk-8, since this triggers
+a failure to dist-upgrade, due to the triggers loop (See: #864597). The
+openjdk-7 package was dropped from stretch, but the java7-runtime-headless
+alternative dependency is satisfied by openjdk-8.
+
+ -- Cyril Brulebois   Thu, 15 Jun 2017 17:33:00 +0200
+
 ca-certificates-java (20170531) unstable; urgency=medium
 
   * Team upload.
diff -Nru ca-certificates-java-20170531/debian/rules ca-certificates-java-20170531+nmu1/debian/rules
--- ca-certificates-java-20170531/debian/rules	2017-05-31 15:00:28.0 +0200
+++ ca-certificates-java-20170531+nmu1/debian/rules	2017-06-15 17:31:24.0 +0200
@@ -6,11 +6,11 @@
 
 ifeq ($(shell dpkg-vendor --derives-from Ubuntu && echo yes),yes)
 	SUBSTVARS = -Vnss:Depends="libnss3 (>= 3.12.9+ckbi-1.82-0ubuntu3~)" \
--Vjre:Depends="openjdk-8-jre-headless"
+-Vjre:Depends="openjdk-7-jre-headless"
 	nss_lib = libnss3
 else
 	SUBSTVARS = -Vnss:Depends="libnss3 (>= 3.12.10-2~)" \
--Vjre:Depends="openjdk-8-jre-headless"
+-Vjre:Depends="openjdk-7-jre-headless"
 	nss_lib = libnss3
 endif
 
diff -Nru ca-certificates-java-20161107/debian/changelog ca-certificates-java-20170531+nmu1/debian/changelog
--- ca-certificates-java-20161107/debian/changelog	2016-11-07 13:45:23.0 +0100
+++ ca-certificates-java-20170531+nmu1/debian/changelog	2017-06-15 17:33:00.0 +0200
@@ -1,3 +1,21 @@
+ca-certificates-java (20170531+nmu1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Revert to depending on openjdk-7 instead of openjdk-8, since this triggers
+a failure to dist-upgrade, due to the triggers loop (See: #864597). The
+openjdk-7 package was dropped from stretch, but the java7-runtime-headless
+alternative dependency is satisfied by openjdk-8.
+
+ -- Cyril Brulebois   Thu, 15 Jun 2017 17:33:00 +0200
+
+ca-certificates-java (20170531) unstable; urgency=medium
+
+  * Team upload.
+  * Depend on openjdk-8 instead of openjdk-7 (Closes: #863803)
+  * Moved the package to Git
+
+ -- Emmanuel Bourg   Wed, 31 May 2017 15:02:23 +0200
+
 ca-certificates-java (20161107) unstable; urgency=medium
 
   * Team upload.
diff -Nru ca-certificates-java-20161107/debian/control ca-certificates-java-20170531+nmu1/debian/control
--- ca-certificates-java-20161107/debian/control	2016-11-07 13:41:49.0 +0100
+++ ca-certificates-java-20170531+nmu1/debian/control	2017-05-31 15:00:11.0 +0200
@@ -8,8 +8,8 @@
James Page 
 Build-Depends: debhelper (>= 9), default-jdk, javahelper, junit4
 Standards-Version: 3.9.8
-Vcs-Svn: svn://anonscm.debian.org/pkg-java/trunk/ca-certificates-java
-Vcs-Browser: https://anonscm.debian.org/viewvc/pkg-java/trunk/ca-certificates-java/
+Vcs-Git: https://anonscm.debian.org/git/pkg-java/ca-certificates-java.git
+Vcs-Browser: https://anonscm.debian.org/cgit/pkg-java/ca-certificates-java.git
 
 Package: ca-certificates-java
 Architecture: all
diff -Nru ca-certificates-java-20161107/debian/rules ca-certificates-java-20170531+nmu1/debian/rules
--- ca-certificates-java-20161107/debian/rules	2016-03-21 14:05:28.0 +0100
+++ ca-certificates-java-20170531+nmu1/debian/rules	2017-06-15 17:31:24.0 +0200
@@ -6,7 +6,7 @@
 
 ifeq ($(shell dpkg-vendor --derives-from Ubuntu && echo yes),yes)
 	SUBSTVARS = -Vnss:Depends="libnss3 (>= 3.12.9+ckbi-1.82-0ubuntu3~)" \
-

Processed: Re: Bug#864768: libquartz2-java: Disable the update checker

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> severity 864769 serious
Bug #864769 [src:libquartz-java] libquartz-java: Disable the update checker
Severity set to 'serious' from 'important'
> tags 864769 + security
Bug #864769 [src:libquartz-java] libquartz-java: Disable the update checker
Added tag(s) security.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
864769: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864769
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#864768: libquartz2-java: Disable the update checker

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> severity 864768 serious
Bug #864768 [libquartz2-java] libquartz2-java: Disable the update checker
Severity set to 'serious' from 'important'
> tags 864768 + security
Bug #864768 [libquartz2-java] libquartz2-java: Disable the update checker
Added tag(s) security.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
864768: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864768
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#864405: CVE-2016-2666

[Debian Bug Tracking System]

Processing control commands:

> tags -1 moreinfo
Bug #864405 [src:undertow] undertow: CVE-2017-2666 CVE-2017-2670
Added tag(s) moreinfo.

-- 
864405: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864405
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: CVE-2016-2666

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> retitle 864405 undertow: CVE-2017-2666 CVE-2017-2670
Bug #864405 [src:undertow] undertow: CVE-2016-2666 CVE-2016-2670
Changed Bug title to 'undertow: CVE-2017-2666 CVE-2017-2670' from 'undertow: 
CVE-2016-2666 CVE-2016-2670'.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
864405: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864405
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed (with 5 errors): Re: CVE-2016-2666

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> retitle 864405 undertow: CVE-2016-2666 CVE-2016-2670
Bug #864405 [src:undertow] CVE-2016-2666
Changed Bug title to 'undertow: CVE-2016-2666 CVE-2016-2670' from 
'CVE-2016-2666'.
> thx
Unknown command or malformed arguments to command.
> Moritz Muehlenhoff wrote:
Unknown command or malformed arguments to command.
> >
Unknown command or malformed arguments to command.
> > There's no other reference that what Red Hat published here:
Unknown command or malformed arguments to command.
> > https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2666
Unknown command or malformed arguments to command.
Too many unknown commands, stopping here.

Please contact me if you need assistance.
-- 
864405: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864405
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: saxonb-java, new version

[Markus Koschany]

Am 06.06.2017 um 13:54 schrieb Simon Kainz:
> Hello,
> 
> i am currently packaging natbraille [0], which in the new version
> 2.2rc1) depends on several libs, including saxonb.
> 
> The source archive [1] from the project website ships several jar
> archives, which i managed to replace with either complete new packages
> (one shipped by the natbraille project itself) or replaced by already
> apckages software form the archives.
> 
> The last one i am struggling with is libsaxonb-java [2], which needs
> ExtensionFunctionDefinition . As stated on [3], this is supported from
> version 9.2.
> 
> I do *not* want to put work one someone else, so if it would be ok for
> you (the pkg-java-team) i would try to prepare a new saxonb package for
> you to review.
> 
> Would this be ok ? This package has also very less rdepends, so i hope
> this won't break to much things.
> 
> Thanks & please share your thoughts.

Hi,

thanks for your interest in saxonb. No objections from my side and
updates are always welcome. Though please test whether the
reverse-dependencies can still be built from source.

P.S.: I suggest to e-mail debian-java next time because
pkg-java-maintainers is just the bug mailing list.

Regards,

Markus




signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Adopting orphaned libjava-jdbc-clojure (#863780)

[tony mancill]

On Fri, Jun 02, 2017 at 12:05:30AM -0400, Elana Hashman wrote:
> Hi all,
> 
> I recently joined the Java Team to help maintain its share of the Clojure
> packages. Hello!
> 
> I noticed libjava-jdbc-clojure was orphaned and I'm interested in adopting
> it: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863780
> 
> The package currently lives under pkg-java, but does not have the Java
> Packaging Team set as its maintainer.
> 
> It is a pure Clojure package, so I'm wondering if I should move it under
> pkg-clojure (my first inclination) or if you'd prefer for me to leave it
> where it is while adding the Java Packaging Team as a maintainer and myself
> as an uploader.

Hello Elana,

pure Clojure sounds like a good fit for pkg-clojure to me.  Please feel
free to move it, and thank you for adopting it.

Cheers,
tony


signature.asc
Description: PGP signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: New json4s on mentors.d.o

[Andreas Tille]

Hi Frederic,

I'm on vacation until Sunday but I'll try what I can do.  Thanks for
your preparation anyway

  Andreas.

On Wed, May 24, 2017 at 04:43:42PM +0200, Frederic Bonnard wrote:
> Hi Andreas,
> 
> following Chris's rejection, here is an update to json4s package, in
> particular with a better debian/copyright this time I hope.
> 
> Sorry for the last one, I was focused on the copyright of the
> additional binary sources and completely missed the source part of the
> package...
> 
> Andreas, could you re-sponsor json4s ?
> https://mentors.debian.net/package/json4s
> 
> Thanks,
> 
> F.
> 
> On Sun, 14 May 2017 18:00:09 +, Chris Lamb 
> <ftpmas...@ftp-master.debian.org> wrote:
> > 
> > Hi,
> > 
> > Lots of missing references in d/copyright, including WorldWide Conferencing 
> > and
> > Scalax. (I stopped looking there; please check over your entire package!)
> > 
> >  -- Chris Lamb <la...@debian.org>  Sun, 14 May 2017 17:15:40 +
> > 
> > 
> > 
> > ===
> > 
> > Please feel free to respond to this email if you don't understand why
> > your files were rejected, or if you upload new files which address our
> > concerns.
> > 



-- 
http://fam-tille.de

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#863223: maven-plugin-tools: FTBFS: maven/tools/plugin/generator/PluginHelpGenerator.java:[300,61] unreported exception java.io.IOException; must be caught or declared to be thrown

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 plexus-utils2 3.0.24-1
Bug #863223 [src:maven-plugin-tools] maven-plugin-tools: FTBFS: 
maven/tools/plugin/generator/PluginHelpGenerator.java:[300,61] unreported 
exception java.io.IOException; must be caught or declared to be thrown
Bug reassigned from package 'src:maven-plugin-tools' to 'plexus-utils2'.
No longer marked as found in versions maven-plugin-tools/3.3-5.
Ignoring request to alter fixed versions of bug #863223 to the same values 
previously set
Bug #863223 [plexus-utils2] maven-plugin-tools: FTBFS: 
maven/tools/plugin/generator/PluginHelpGenerator.java:[300,61] unreported 
exception java.io.IOException; must be caught or declared to be thrown
There is no source info for the package 'plexus-utils2' at version '3.0.24-1' 
with architecture ''
Unable to make a source version for version '3.0.24-1'
Marked as found in versions 3.0.24-1.
> affects -1 maven-plugin-tools
Bug #863223 [plexus-utils2] maven-plugin-tools: FTBFS: 
maven/tools/plugin/generator/PluginHelpGenerator.java:[300,61] unreported 
exception java.io.IOException; must be caught or declared to be thrown
Added indication that 863223 affects maven-plugin-tools

-- 
863223: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863223
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#855324: pdfsam fails to start

[Debian Bug Tracking System]

Processing control commands:

> reopen -1
Bug #855324 {Done: Markus Koschany <a...@debian.org>} [pdfsam] pdfsam fails to 
start
'reopen' may be inappropriate when a bug has been closed with a version;
all fixed versions will be cleared, and you may need to re-add them.
Bug reopened
No longer marked as fixed in versions pdfsam/1.1.4-3.

-- 
855324: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855324
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#859001: libbrowserlauncher-java: No jar file without version number

[Debian Bug Tracking System]

Processing control commands:

> severity -1 important
Bug #859001 [libbrowserlauncher-java] libbrowserlauncher-java: No jar file 
without version number
Severity set to 'important' from 'serious'

-- 
859001: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859001
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#860650: zookeeper: FTBFS on i386: java.io.FileNotFoundException: /home/user42/.ant/cache/resolved-org.apache.zookeeper-zookeeper-3.4.9-2.xml (No such file or directory)

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> # arch:all failure on i386, which builds fine on amd64
> tags 860650 stretch-ignore
Bug #860650 [src:zookeeper] zookeeper: FTBFS on i386:   
java.io.FileNotFoundException: 
/home/user42/.ant/cache/resolved-org.apache.zookeeper-zookeeper-3.4.9-2.xml (No 
such file or directory)
Added tag(s) stretch-ignore.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
860650: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860650
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Wheezy update of libxstream-java?

[Emmanuel Bourg]

Hi,

It looks like Chris was the fastest to fix this in Wheezy, thanks! If
the changes could also be pushed to the wheezy branch of the Git
repository [1] that would be perfect.

Emmanuel Bourg

[1] https://anonscm.debian.org/cgit/pkg-java/libxstream-java.git


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Wheezy update of fop?

[Debian Bug Tracking System]

Processing control commands:

> forwarded -1 https://issues.apache.org/jira/browse/FOP-2668
Bug #860567 [src:fop] fop: CVE-2017-5661: information disclosure vulnerability
Set Bug forwarded-to-address to 
'https://issues.apache.org/jira/browse/FOP-2668'.

-- 
860567: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860567
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Wheezy update of fop?

[Mathieu Malaterre]

Hi Ola,

On Sun, Apr 23, 2017 at 9:46 PM, Ola Lundqvist  wrote:
> Dear maintainer(s),
>
> The Debian LTS team would like to fix the security issues which are
> currently open in the Wheezy version of fop:
> https://security-tracker.debian.org/tracker/CVE-2017-5661
>
> Would you like to take care of this yourself?

The CVE is very unclear to me. It seems I need to upload fop 2.2 in
place of fop 2.1. Since we are in the middle of the freeze it does not
make much sense to make such upload in sid right now.

-M

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: jnr-posix: FTBFS on i386: dh_auto_test: /usr/lib/jvm/default-java/bin/java -noverify -cp /usr/share/maven/boot/plexus-classworlds-2.x.jar:/usr/lib/jvm/default-java/lib/tools.jar -Dmaven

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> forwarded 860691 https://github.com/jnr/jnr-posix/issues/99
Bug #860691 [src:jnr-posix] jnr-posix: FTBFS on i386: dh_auto_test: 
/usr/lib/jvm/default-java/bin/java -noverify -cp 
/usr/share/maven/boot/plexus-classworlds-2.x.jar:/usr/lib/jvm/default-java/lib/tools.jar
 -Dmaven.home=/usr/share/maven 
-Dmaven.multiModuleProjectDirectory=/<> 
-Dclassworlds.conf=/etc/maven/m2-debian.conf 
org.codehaus.plexus.classworlds.launcher.Launcher 
-s/etc/maven/settings-debian.xml -Ddebian.dir=/<>/debian 
-Dmaven.repo.local=/<>/debian/maven-repo test returned exit code 1
Set Bug forwarded-to-address to 'https://github.com/jnr/jnr-posix/issues/99'.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
860691: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860691
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Wheezy update of batik?

[Emilio Pozuelo Monfort]

On 23/04/17 21:50, Ola Lundqvist wrote:
> Dear maintainer(s),
> 
> The Debian LTS team would like to fix the security issues which are
> currently open in the Wheezy version of batik:
> https://security-tracker.debian.org/tracker/CVE-2017-5662

FWIW I investigated this a bit and there doesn't seem to be any details other
than what is in the advisory: i.e. I couldn't find the commit that fixes this
(looking at the svn repository) or an upstream bug report. I found a
security-related one, reported by Lars Krapf (as mentioned in the oss-security
mail) but that seemed different than CVE-2017-5662 and much older (see [1]).

Also our 1.8 and the upstream 1.9 tarballs have different layouts so it's hard
to compare them.

Cheers,
Emilio

[1] https://issues.apache.org/jira/browse/BATIK-1139

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: activemq: CVE-2015-7559: DoS in client via shutdown command

[Debian Bug Tracking System]

Processing control commands:

> severity -1 serious
Bug #860866 [src:activemq] activemq: CVE-2015-7559: DoS in client via shutdown 
command
Severity set to 'serious' from 'important'

-- 
860866: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860866
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: Bug#858876: libjna-jni: causes NoClassDefFoundError

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 libnb-platform18-java
Bug #858876 [libjna-jni] libjna-jni: causes NoClassDefFoundError
Bug reassigned from package 'libjna-jni' to 'libnb-platform18-java'.
No longer marked as found in versions libjna-java/4.2.2-2.
Ignoring request to alter fixed versions of bug #858876 to the same values 
previously set

-- 
858876: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858876
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: libjna-jni: causes NoClassDefFoundError

[Debian Bug Tracking System]

Processing control commands:

> reopen -1
Bug #858876 {Done: Emmanuel Bourg <ebo...@apache.org>} [libjna-jni] libjna-jni: 
causes NoClassDefFoundError
'reopen' may be inappropriate when a bug has been closed with a version;
all fixed versions will be cleared, and you may need to re-add them.
Bug reopened
No longer marked as fixed in versions libjna-java/4.2.2-3.

-- 
858876: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858876
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#860068: Processed: Re: Bug#860068: tomcat8: CVE-2017-5647

[Markus Koschany]

Am 11.04.2017 um 17:44 schrieb Salvatore Bonaccorso:
[...]
>> I suggest to use the found/fixed tags as
>> needed.
> 
> NB: Which is exactly what I did (see the different found versions), to
> track correctly the version as well in BTS. But now it would treat
> e.g.  CVE-2017-5650 as well as found in 8.0.14-1 which is not true.
> 
> Anyway, thanks a lot for taking care of those CVEs and fixing them!
> 
> Regards,
> Salvatore

I appreciate that you already did an assessment which version is
affected or not. However I find it simpler to report all newly found
vulnerabilities with one bug report and then let the maintainer evaluate
the situation and act on the bug report as needed. Moritz does this a
lot when he reports CVEs. Your approach makes totally sense too but
since we have the security tracker with all those information, you have
already marked two CVEs as fixed in Jessie, it's not necessarily
imperative.

By the way we also have many CVEs with no Debian bug report and users
just have to rely on the security tracker for further information. In
fact we want them to use it and the bug reports are more a heads-up for
maintainers.

Of course this is just my stubborn opinion, it's not easy to please
everybody. Others will surely want that you report all those dozens of
CVEs for package X separately...

Regards,

Markus




signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#860068: Processed: Re: Bug#860068: tomcat8: CVE-2017-5647

[Salvatore Bonaccorso]

Hi,

On Tue, Apr 11, 2017 at 05:24:25PM +0200, Markus Koschany wrote:
> Am 11.04.2017 um 17:18 schrieb Salvatore Bonaccorso:
> > Hi Markus,
> > 
> > On Tue, Apr 11, 2017 at 02:18:14PM +, Debian Bug Tracking System wrote:
> >> Processing control commands:
> >>
> >>> merge 860068 860069 860070 860071
> >> Bug #860068 [src:tomcat8] tomcat8: CVE-2017-5647
> >> Bug #860069 [src:tomcat8] tomcat8: CVE-2017-5648
> >> Marked as found in versions tomcat8/8.5.11-1.
> >> Bug #860068 [src:tomcat8] tomcat8: CVE-2017-5647
> >> Marked as found in versions tomcat8/8.5.11-1.
> >> Bug #860071 [src:tomcat8] tomcat8: CVE-2017-5651
> >> Marked as found in versions tomcat8/8.0.14-1.
> >> Bug #860070 [src:tomcat8] tomcat8: CVE-2017-5650
> >> Marked as found in versions tomcat8/8.0.14-1.
> >> Merged 860068 860069 860070 860071
> > 
> > Why the merge? I was a exlicit choice to open 4 bugs due to the
> > different CVE's and different affected versions (note that two affect
> > 8.0.14-1 and two only 8.5.11-1 but not the version in jessie).
> 
> Hi,
> 
[...]
> I suggest to use the found/fixed tags as
> needed.

NB: Which is exactly what I did (see the different found versions), to
track correctly the version as well in BTS. But now it would treat
e.g.  CVE-2017-5650 as well as found in 8.0.14-1 which is not true.

Anyway, thanks a lot for taking care of those CVEs and fixing them!

Regards,
Salvatore

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#860068: Processed: Re: Bug#860068: tomcat8: CVE-2017-5647

[Markus Koschany]

Am 11.04.2017 um 17:18 schrieb Salvatore Bonaccorso:
> Hi Markus,
> 
> On Tue, Apr 11, 2017 at 02:18:14PM +, Debian Bug Tracking System wrote:
>> Processing control commands:
>>
>>> merge 860068 860069 860070 860071
>> Bug #860068 [src:tomcat8] tomcat8: CVE-2017-5647
>> Bug #860069 [src:tomcat8] tomcat8: CVE-2017-5648
>> Marked as found in versions tomcat8/8.5.11-1.
>> Bug #860068 [src:tomcat8] tomcat8: CVE-2017-5647
>> Marked as found in versions tomcat8/8.5.11-1.
>> Bug #860071 [src:tomcat8] tomcat8: CVE-2017-5651
>> Marked as found in versions tomcat8/8.0.14-1.
>> Bug #860070 [src:tomcat8] tomcat8: CVE-2017-5650
>> Marked as found in versions tomcat8/8.0.14-1.
>> Merged 860068 860069 860070 860071
> 
> Why the merge? I was a exlicit choice to open 4 bugs due to the
> different CVE's and different affected versions (note that two affect
> 8.0.14-1 and two only 8.5.11-1 but not the version in jessie).

Hi,

please combine CVEs for (Java) packages because single bug reports just
create more noise on the list and in the end we make one upload to
address all of them together. I suggest to use the found/fixed tags as
needed.

Regards,

Markus




signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Processed: Re: Bug#860068: tomcat8: CVE-2017-5647

[Salvatore Bonaccorso]

Hi Markus,

On Tue, Apr 11, 2017 at 02:18:14PM +, Debian Bug Tracking System wrote:
> Processing control commands:
> 
> > merge 860068 860069 860070 860071
> Bug #860068 [src:tomcat8] tomcat8: CVE-2017-5647
> Bug #860069 [src:tomcat8] tomcat8: CVE-2017-5648
> Marked as found in versions tomcat8/8.5.11-1.
> Bug #860068 [src:tomcat8] tomcat8: CVE-2017-5647
> Marked as found in versions tomcat8/8.5.11-1.
> Bug #860071 [src:tomcat8] tomcat8: CVE-2017-5651
> Marked as found in versions tomcat8/8.0.14-1.
> Bug #860070 [src:tomcat8] tomcat8: CVE-2017-5650
> Marked as found in versions tomcat8/8.0.14-1.
> Merged 860068 860069 860070 860071

Why the merge? I was a exlicit choice to open 4 bugs due to the
different CVE's and different affected versions (note that two affect
8.0.14-1 and two only 8.5.11-1 but not the version in jessie).

Regards,
Salvatore

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.