Your message dated Sat, 15 Nov 2014 15:19:57 +0000
with message-id <e1xpf8o-0002bs...@franck.debian.org>
and subject line Bug#762462: fixed in glassfish 1:2.1.1-b31g+dfsg1-2
has caused the Debian Bug report #762462,
regarding glassfish: Current version no longer supported upstream
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
762462: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762462
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: glassfish
Version: 1:2.1.1-b31g+dfsg1-1
Severity: serious
Tags: security
Hello,
while looking up open security issues in glassfish I noticed that the
current version is no longer supported upstream (according to
http://www.oracle.com/us/support/library/lifetime-support-middleware-069163.pdf).
You already have open security issues that nobody knows how to fix so
it's clearly not acceptable to release this version in jessie:
https://security-tracker.debian.org/tracker/source-package/glassfish
Please consider packaging version 4.x which seems to be mentionned
on the upstream homepage:
https://glassfish.java.net/download.html
Regards,
-- System Information:
Debian Release: jessie/sid
APT prefers squeeze-lts
APT policy: (500, 'squeeze-lts'), (500, 'unstable'), (500, 'testing'), (500,
'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
Source: glassfish
Source-Version: 1:2.1.1-b31g+dfsg1-2
We believe that the bug you reported is fixed in the latest version of
glassfish, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 762...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Emmanuel Bourg <ebo...@apache.org> (supplier of updated glassfish package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 15 Nov 2014 15:15:56 +0100
Source: glassfish
Binary: glassfish-activation glassfish-jmac-api glassfish-mail glassfish-javaee
glassfish-toplink-essentials
Architecture: source all
Version: 1:2.1.1-b31g+dfsg1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebo...@apache.org>
Description:
glassfish-activation - Open source Java EE 5 Application Server
glassfish-javaee - Open source Java EE 5 Application Server
glassfish-jmac-api - Open source Java EE 5 Application Server
glassfish-mail - Open source Java EE 5 Application Server
glassfish-toplink-essentials - Open source Java EE 5 Application Server
Closes: 762462
Changes:
glassfish (1:2.1.1-b31g+dfsg1-2) unstable; urgency=medium
.
* Team upload.
* Disabled the unused glassfish-appserv package (Closes: #762462)
Checksums-Sha1:
6059afba0f24a1864ad5131210057c5899c60f35 2481 glassfish_2.1.1-b31g+dfsg1-2.dsc
07a4f01d5aedb67581f364b371947ee5f635a83c 15256
glassfish_2.1.1-b31g+dfsg1-2.debian.tar.xz
03b800595d6b2e5a592142d5d86b09c5623d9f1e 76434
glassfish-activation_2.1.1-b31g+dfsg1-2_all.deb
9cca50ff0e21eb211f147651447982fe3c6b9a7b 26968
glassfish-jmac-api_2.1.1-b31g+dfsg1-2_all.deb
ee7bd01f1c876bfbffee8bb05bb85e31e609157b 393238
glassfish-mail_2.1.1-b31g+dfsg1-2_all.deb
54e8f19f0bf8ae64eafaec97b7ad5a0ee0ccfc39 838334
glassfish-javaee_2.1.1-b31g+dfsg1-2_all.deb
d607792a7901b9752b67a29d57c48797e801a455 2406062
glassfish-toplink-essentials_2.1.1-b31g+dfsg1-2_all.deb
Checksums-Sha256:
4c3ddfe1a0837133a87344679c3bd7af6d50ef560fee8d4b103223abebd7f7db 2481
glassfish_2.1.1-b31g+dfsg1-2.dsc
416cb9548473fce334c749b2f45769a6e2144508dafa851cf423f7d4fe726925 15256
glassfish_2.1.1-b31g+dfsg1-2.debian.tar.xz
53066404e01859ad42ec1796a1da9f25ee9c66d4f8ce43d0b70edd4fe9676569 76434
glassfish-activation_2.1.1-b31g+dfsg1-2_all.deb
38b813b64e4c2721bc5c1cb7af3c30231bbb0a0da1f73b9364fe15a591f848f1 26968
glassfish-jmac-api_2.1.1-b31g+dfsg1-2_all.deb
791a897a2ef241a3d41ef5dbaa27cbc86dcc2328a816ab4d3d515861042e3db5 393238
glassfish-mail_2.1.1-b31g+dfsg1-2_all.deb
920968b991221805487b22cedc0ed4a00d3d8c10ae576dc91fed799ade7a06a7 838334
glassfish-javaee_2.1.1-b31g+dfsg1-2_all.deb
c8b5a894208264fcabc73d204e032bec3957ad5e2b62737e938eebd8a49e0b5e 2406062
glassfish-toplink-essentials_2.1.1-b31g+dfsg1-2_all.deb
Files:
0dce77bc6a2f7b48c4eda2c48c75d4a1 2481 java optional
glassfish_2.1.1-b31g+dfsg1-2.dsc
1a6de24919e261ca76af13039db281ec 15256 java optional
glassfish_2.1.1-b31g+dfsg1-2.debian.tar.xz
759b7afb576f73b10f5ccb47f5c8bc3b 76434 java optional
glassfish-activation_2.1.1-b31g+dfsg1-2_all.deb
1cf04e9c72b3f3d3ee6148468486ddce 26968 java optional
glassfish-jmac-api_2.1.1-b31g+dfsg1-2_all.deb
08994ab6b4f5c4309ea1b7b54d42754f 393238 java optional
glassfish-mail_2.1.1-b31g+dfsg1-2_all.deb
96d013b6c3b8655fe878ac1b68b5e405 838334 java optional
glassfish-javaee_2.1.1-b31g+dfsg1-2_all.deb
edb47576b5e94bc377ef0de3d47c632d 2406062 java optional
glassfish-toplink-essentials_2.1.1-b31g+dfsg1-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=m7H+
-----END PGP SIGNATURE-----
--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
debian-j...@lists.debian.org for discussions and questions.
