Your message dated Sat, 12 Mar 2016 18:38:38 +0100
with message-id <[email protected]>
and subject line Re: activemq: depends on obsolete libcommons-httpclient-java
library
has caused the Debian Bug report #800977,
regarding activemq: depends on obsolete libcommons-httpclient-java library
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
800977: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=800977
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: activemq
Severity: normal
User: [email protected]
Usertags: oldlibs libcommons-httpclient-java
Hi,
activemq depends on libcommons-httpclient-java, which is obsolete and was
replaced by libhttpclient-java. It has reached EOL status in 2011! It is no
longer supported upstream [1] and was affected by multiple security issues in
the recent past. activemq should be ported to the new libhttpclient-java
version, so that we can remove the old, unmaintained one. Please forward this
issue upstream, if you can't migrate the package yourself.
We would like to see libcommons-httpclient-java removed during the Stretch
release cycle but due to the large number of reverse-dependencies the outcome
depends more than ever on your help.
Please help us to accomplish this goal. We will bump this issue to important
when the list of rdeps is getting smaller and we think that the removal is
possible. We will eventually raise the severity to serious when the number
of rdeps is small.
If you have any questions don't hesitate to ask and contact us on
[email protected]
Regards,
Markus
[1] https://hc.apache.org/httpclient-3.x/
[2]
https://security-tracker.debian.org/tracker/source-package/commons-httpclient
--- End Message ---
--- Begin Message ---
Version: 5.6.0+dfsg1-5
> Hi Tony,
>
> I think you are right. ActiveMQ replaced commons-httpclient with
> httpclient in the version 5.6.0 [1], so our package dependencies were
> simply out of date and no code change is required.
ActiveMQ does not depend on libcommons-httpclient-java anymore. Closing.
Markus
signature.asc
Description: OpenPGP digital signature
--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
[email protected] for discussions and questions.
