Re: glassfish-* packages no longer maintained

2012-07-18 Thread Sylvestre Ledru 
Le 18/07/2012 19:39, Benjamin Jaton a écrit :
> Hello,
>
> The packages glassfish-* shipped in all the version of Debian are
> version 2.1.1.
> The glassfish v2 open souce code hasn't received any updates since
> 2010, not even critical security updates.
> ( https://svn.java.net/svn/glassfish~svn/trunk/v2/
>  )
> Only the Oracle Enterprise version is still maintained.
> Even if those are not the full server stack (
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653964 ), they may
> contains security flaws.
> We just don't know, right?
>
> The v3 version is very stable and actively maintained. I would
> consider shipping it instead of v2.

Thanks for the information.
Do you think we should ask for a removal in Wheezy ?
Are you volunteer to package the v3 ?

ThanksS

Re: glassfish-* packages no longer maintained

2012-07-18 Thread Benjamin Jaton 
Let me clarify:
What I am saying is that upstream is no longer maintaining it.
The Glassfish open source team has made a commit in v2 since 2010.

On Wed, Jul 18, 2012 at 10:39 AM, Benjamin Jaton
wrote:

> Hello,
>
> The packages glassfish-* shipped in all the version of Debian are version
> 2.1.1.
> The glassfish v2 open souce code hasn't received any updates since 2010,
> not even critical security updates.
> ( https://svn.java.net/svn/glassfish~svn/trunk/v2/ )
> Only the Oracle Enterprise version is still maintained.
> Even if those are not the full server stack (
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653964 ), they may
> contains security flaws.
> We just don't know, right?
>
> The v3 version is very stable and actively maintained. I would consider
> shipping it instead of v2.
>
> Thanks,
> Benjamin Jaton

glassfish-* packages no longer maintained

2012-07-18 Thread Benjamin Jaton 
Hello,

The packages glassfish-* shipped in all the version of Debian are version
2.1.1.
The glassfish v2 open souce code hasn't received any updates since 2010,
not even critical security updates.
( https://svn.java.net/svn/glassfish~svn/trunk/v2/ )
Only the Oracle Enterprise version is still maintained.
Even if those are not the full server stack (
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653964 ), they may
contains security flaws.
We just don't know, right?

The v3 version is very stable and actively maintained. I would consider
shipping it instead of v2.

Thanks,
Benjamin Jaton

Re: -gcj packages and openjdk-built jars

2012-07-18 Thread Andrew Haley 
On 07/18/2012 02:48 PM, Rene Engelhard wrote:
> On Wed, Jul 18, 2012 at 02:28:42PM +0100, Andrew Haley wrote:
>> On 07/18/2012 02:02 PM, Rene Engelhard wrote:
>>>  - compile the jar.sos against -java-commons jars (b-d on itself on kbsd-*)
>>
>> The .jar.so files have no compile-time dependencies on anything.
>> All dependencies are resolved at runtime.
> 
> Well, they obviously have the .jars as a compile-time dependency :)
> 
> And that is the point of the question: What happens if the jar.so
> was built from a gcj-built jar but then the jar installedis built with
> OpenJDK? Noop?

Assuming that both Java compilers are correct, nothing exciting.  No
more than if you mix Java compilers when building libraries.  I
wouldn't do it myself, though.

Andrew.


-- 
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/5006c702.7040...@redhat.com

Re: -gcj packages and openjdk-built jars

2012-07-18 Thread Rene Engelhard 
On Wed, Jul 18, 2012 at 02:28:42PM +0100, Andrew Haley wrote:
> On 07/18/2012 02:02 PM, Rene Engelhard wrote:
> >  - compile the jar.sos against -java-commons jars (b-d on itself on kbsd-*)
> 
> The .jar.so files have no compile-time dependencies on anything.
> All dependencies are resolved at runtime.

Well, they obviously have the .jars as a compile-time dependency :)

And that is the point of the question: What happens if the jar.so
was built from a gcj-built jar but then the jar installedis built with
OpenJDK? Noop?

Regards,



-- 
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120718134857.ga14...@rene-engelhard.de

Re: -gcj packages and openjdk-built jars

2012-07-18 Thread Andrew Haley 
On 07/18/2012 02:02 PM, Rene Engelhard wrote:
>  - compile the jar.sos against -java-commons jars (b-d on itself on kbsd-*)

The .jar.so files have no compile-time dependencies on anything.
All dependencies are resolved at runtime.

Andrew.


-- 
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/5006ba0a.3010...@redhat.com

-gcj packages and openjdk-built jars (was: Re: Bug#678793: task-desktop: libreoffice-gcj no longer exists)

2012-07-18 Thread Rene Engelhard 
On Sun, Jun 24, 2012 at 12:53:27PM +0200, Rene Engelhard wrote:
> Partly. It's temporary for kfreebsd-* (see below) , the rest will stay gone
> (everything except kfreebsd-* has OpenJDK available.)
[...}
> So it is, and yes, I plan to reenable it when gcc-defaults migrated (-gcj gets
> a dependency on a newer libgcj-bc than in testing due to .shlibs)

This happened some while ago - but I am actually not sure whether
libreoffice-gcj actually worked in  the last months.

The .jar.sos get built from .jars which get build wit gcj *but not shipped*.
They would be in -common but that contains the jars built by openjdk from the
upload.

When I read http://gcc.gnu.org/onlinedocs/gcj/Invoking-gcj_002ddbtool.html I
read ^ibgcj can use these databases to find a shared library corresponding to 
the bytecode representation of a class.".
That "corresponding to the bytecode representation" worries me.
Does that mean that the .jar.sos as been there didn't work as gcj/openjdk
probably have fine differences? And so Either we need to
 - compile the jar.sos against -java-commons jars (b-d on itself on kbsd-*)
 - move the jars somewhere which can differ between openjdk and gcj archs
 - forget libreoffice-gcj

doko, debian-java? Any hints?

Regards,

Rene 


-- 
To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120718130216.ga11...@rene-engelhard.de