Processing of libpicocontainer1-java_1.3-1_amd64.changes

[Debian FTP Masters]

libpicocontainer1-java_1.3-1_amd64.changes uploaded successfully to localhost
along with the files:
  libpicocontainer1-java_1.3-1.dsc
  libpicocontainer1-java_1.3-1.debian.tar.xz
  libpicocontainer1-java_1.3-1_all.deb
  libpicocontainer1-java_1.3-1_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

libpicocontainer1-java_1.3-1_amd64.changes REJECTED

[Debian FTP Masters]

libpicocontainer1-java_1.3-1.dsc: Refers to non-existing file 
'libpicocontainer1-java_1.3.orig.tar.xz'
Perhaps you need to include the file in your upload?



===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.


__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#940723: java-package requires libgtk-3-0 and libcairo-gobject2 to build java8 221

[Santiago R.R.]

Package: java-package
Version: 0.62
Severity: serious

Dear java-package maintainers,

When trying to build the deb package of jdk-8u221-linux-x64.tar.gz on a
clean sid pbuilder, I got the following errors:

…
dpkg-shlibdeps: error: cannot find library libgtk-3.so.0 needed by 
debian/oracle-java8-jdk/usr/lib/jvm/oracle-java8-jdk-amd64/jre/lib/amd64/libglassgtk3.so
 (ELF format: 'elf64-x86-64' abi: '0201003e'; RPATH: '')
dpkg-shlibdeps: error: cannot find library libgdk-3.so.0 needed by 
debian/oracle-java8-jdk/usr/lib/jvm/oracle-java8-jdk-amd64/jre/lib/amd64/libglassgtk3.so
 (ELF format: 'elf64-x86-64' abi: '0201003e'; RPATH: '')
dpkg-shlibdeps: error: cannot find library libcairo-gobject.so.2 needed by 
debian/oracle-java8-jdk/usr/lib/jvm/oracle-java8-jdk-amd64/jre/lib/amd64/libglassgtk3.so
 (ELF format: 'elf64-x86-64' abi: '0201003e'; RPATH: '')
…
dpkg-shlibdeps: error: cannot continue due to the errors listed above
Note: libraries are not searched in other binary packages that do not have any 
shlibs or symbols file.
To help dpkg-shlibdeps find private libraries, you might need to use -l.
…
dh_shlibdeps: Aborting due to earlier error
make[1]: *** [debian/rules:17: override_dh_shlibdeps] Error 255
make: *** [debian/rules:11: binary] Error 2
dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2


Installing libcairo-gobject2 and libgtk-3-0 makes make-jpkg happy.

Cheers,

 -- Santiago

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (500, 'oldstable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.2.0-2-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=es_CO.UTF-8, LC_CTYPE=es_CO.UTF-8 (charmap=UTF-8), 
LANGUAGE=es_CO.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages java-package depends on:
ii  build-essential  12.8
ii  debhelper12.6.1
ii  dpkg-dev 1.19.7
ii  fakeroot 1.24-1
ii  libasound2   1.1.8-1
ii  libfontconfig1   2.13.1-2+b1
ii  libgl1-mesa-glx  19.1.6-1
ii  libgtk2.0-0  2.24.32-4
ii  libx11-6 2:1.6.7-1
ii  libxslt1.1   1.1.32-2.1
ii  libxtst6 2:1.2.3-1
ii  libxxf86vm1  1:1.1.4-1+b2
ii  unzip6.0-25

java-package recommends no packages.

Versions of packages java-package suggests:
pn  openjdk-7-jre  


signature.asc
Description: PGP signature
__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of libpicocontainer1-java_1.3-1_amd64.changes

[Debian FTP Masters]

libpicocontainer1-java_1.3-1_amd64.changes uploaded successfully to localhost
along with the files:
  libpicocontainer1-java_1.3-1.dsc
  libpicocontainer1-java_1.3.orig.tar.xz
  libpicocontainer1-java_1.3-1.debian.tar.xz
  libpicocontainer1-java_1.3-1_all.deb
  libpicocontainer1-java_1.3-1_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

libpicocontainer1-java_1.3-1_amd64.changes is NEW

[Debian FTP Masters]

binary:libpicocontainer1-java is NEW.
binary:libpicocontainer1-java is NEW.
source:libpicocontainer1-java is NEW.

Your package has been put into the NEW queue, which requires manual action
from the ftpteam to process. The upload was otherwise valid (it had a good
OpenPGP signature and file hashes are valid), so please be patient.

Packages are routinely processed through to the archive, and do feel
free to browse the NEW queue[1].

If there is an issue with the upload, you will receive an email from a
member of the ftpteam.

If you have any questions, you may reply to this email.

[1]: https://ftp-master.debian.org/new.html
 or https://ftp-master.debian.org/backports-new.html for *-backports

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of cpptasks_1.0~b5-3_source.changes

[Debian FTP Masters]

cpptasks_1.0~b5-3_source.changes uploaded successfully to localhost
along with the files:
  cpptasks_1.0~b5-3.dsc
  cpptasks_1.0~b5-3.debian.tar.xz

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

cpptasks_1.0~b5-3_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Thu, 19 Sep 2019 16:05:18 +0200
Source: cpptasks
Architecture: source
Version: 1.0~b5-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Andrej Shadura 
Changes:
 cpptasks (1.0~b5-3) unstable; urgency=medium
 .
   [ Christopher Baines ]
   * Improve formatting for debian/control.
   * Add patch to remove Sourceforge logo (privacy breach).
   * Add watch file (thanks bartm).
   * Improve description formatting.
   * Update copyright file format.
 .
   [ Andrej Shadura ]
   * Compile with and for Java 7.
   * Switch to dh and maven-repo-helper.
   * Use secure copyright file specification URI.
   * Bump debhelper from deprecated 7 to 12.
   * Change priority extra to priority optional.
   * Run wrap-and-sort -bask.
   * Use debhelper-compat instead of debian/compat.
   * d/control: Set Vcs-* to salsa.debian.org.
Checksums-Sha1:
 fa76b3351a85a966d17532a09e0f029eb7c75d92 1810 cpptasks_1.0~b5-3.dsc
 055df40b0bb765f5393aa1e97d84ea13416ca9f5 3572 cpptasks_1.0~b5-3.debian.tar.xz
Checksums-Sha256:
 c569be98a2244c5c7bf07517370d328a8ec4b4711a680bc47f00762ab6310b8b 1810 
cpptasks_1.0~b5-3.dsc
 0c9e6d7d9972b48f22057c537ff54035cb3044ddccf9d03597ce01d3916045ae 3572 
cpptasks_1.0~b5-3.debian.tar.xz
Files:
 945e0e19aa1b2c4e633ff68ecd69104d 1810 java optional cpptasks_1.0~b5-3.dsc
 4014180edd632d798b88e8bf0ef45414 3572 java optional 
cpptasks_1.0~b5-3.debian.tar.xz

-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl2DjqkACgkQXkCM2RzY
OdKAEgf9EkUBAU1JRDKjPKcOPuDVwWHS0BDeqcuxaFcAreghtMjdYNCPmYAGrkjT
DihCyAWtkxc61gIZyA79OqlLyO7aTcVsIeZlSOzEpwNoZgUl8h+cKbAJ4COsi9Ag
hi5zWcf7j+KFqpIlqlflcY2pMmbGC8XJ9rlb0rZkaJ22meHuE1+AgOU+R0iX9ZPV
Zs/NmSJl1vyZ/gDpa2zStvc4qFSoeiyTObAwor6sRq7alThJQVfuX8owe6Slr+4w
A/3caYkcLjsMKjt8+gKkftKffbs6pM5ZNIXJ15UiAruD8R2MowJGdOfpWzGj9ziN
DHgvoPDYwvk7Z0xf7Zz4VxBIF+2Sxw==
=DN2N
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of libvldocking-java_3.0.5-3_source.changes

[Debian FTP Masters]

libvldocking-java_3.0.5-3_source.changes uploaded successfully to localhost
along with the files:
  libvldocking-java_3.0.5-3.dsc
  libvldocking-java_3.0.5-3.debian.tar.xz
  libvldocking-java_3.0.5-3_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Re: libvldocking-java: new upstream version 3.0

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> fixed 537403 3.0.5-1
Bug #537403 [libvldocking-java] libvldocking-java: new upstream version 3.0
Marked as fixed in versions libvldocking-java/3.0.5-1.
> close 537403
Bug #537403 [libvldocking-java] libvldocking-java: new upstream version 3.0
Marked Bug as done
>
End of message, stopping processing here.

Please contact me if you need assistance.
-- 
537403: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=537403
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

libvldocking-java_3.0.5-3_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Thu, 19 Sep 2019 17:21:43 +0200
Source: libvldocking-java
Architecture: source
Version: 3.0.5-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Changes:
 libvldocking-java (3.0.5-3) unstable; urgency=medium
 .
   * Team upload.
   * Use an UTC timestamp in DockingDesktop to make the build reproducible
   * Standards-Version updated to 4.4.0
   * Added a watch file
Checksums-Sha1:
 dcb0174a2e5f779406b0f814141dd2450e3fa949 2141 libvldocking-java_3.0.5-3.dsc
 7727f642d404673c1d752ce8277317e7d7f64bcc 4440 
libvldocking-java_3.0.5-3.debian.tar.xz
 28105ccd89ae924f634d362ede568e083344bf9d 12637 
libvldocking-java_3.0.5-3_source.buildinfo
Checksums-Sha256:
 5c5c4875e0ab896de6509b9430941c2adb03a64a599bfc99f0cff90006504c7d 2141 
libvldocking-java_3.0.5-3.dsc
 7df07cb6350d99e2f927ae91f3aa77074e5d3ca76704ae32a33b7224f82d4721 4440 
libvldocking-java_3.0.5-3.debian.tar.xz
 098d31a5bdc6afa4cddc96025ddd53df1a19cbc9944d6836244d6fa6813b6dc7 12637 
libvldocking-java_3.0.5-3_source.buildinfo
Files:
 05e176e3ed8f69d5874edc3e6e879c84 2141 java optional 
libvldocking-java_3.0.5-3.dsc
 0986f67a51be7920792b42f448d2e8ba 4440 java optional 
libvldocking-java_3.0.5-3.debian.tar.xz
 897357219b00c352c3606a3504e09acb 12637 java optional 
libvldocking-java_3.0.5-3_source.buildinfo

-BEGIN PGP SIGNATURE-
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=N3k4
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of cpptasks_1.0~b5-4_source.changes

[Debian FTP Masters]

cpptasks_1.0~b5-4_source.changes uploaded successfully to localhost
along with the files:
  cpptasks_1.0~b5-4.dsc
  cpptasks_1.0~b5-4.debian.tar.xz

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

cpptasks_1.0~b5-4_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Thu, 19 Sep 2019 18:12:34 +0200
Source: cpptasks
Architecture: source
Version: 1.0~b5-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Andrej Shadura 
Changes:
 cpptasks (1.0~b5-4) unstable; urgency=medium
 .
   * Specify the rule to fix the ant dependency.
Checksums-Sha1:
 e63a87c6f515a0db7d58ed654045a565615007ff 1810 cpptasks_1.0~b5-4.dsc
 293321feaf8798ed79ef73a6c0b50aa008afee1f 3652 cpptasks_1.0~b5-4.debian.tar.xz
Checksums-Sha256:
 652befcf9b14e2bd27b6b542cfc219705dae8009b6a4a5929b19aa26639e5a67 1810 
cpptasks_1.0~b5-4.dsc
 bfec0e22e173c1379f8a3dbbd322282d3dbf700ecdea5dbc2315b43f2c2a165b 3652 
cpptasks_1.0~b5-4.debian.tar.xz
Files:
 03b3bc327cea9898771dd8e83592e531 1810 java optional cpptasks_1.0~b5-4.dsc
 28b2a220c3e1b5a8103c3e6ba0da135d 3652 java optional 
cpptasks_1.0~b5-4.debian.tar.xz

-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl2DqSQACgkQXkCM2RzY
OdJieAgAm22MhGMwxCDaOtes4gUZhA9VMWJLBWj/GAY2lgdHPRaJZgPBh9wQfonY
RfTU8nk24AZD65t3UvI67phPZS3/SQakaj2BMewszvhsBpJs+k3MmPON3uHYW7AH
Mm/1hbT4cgVIwshl5CQzvGK5aLV/LNoI8LFHjvuvsX0fPAQf+rFIOuVLIYwg5jv+
0nJqxbPJHfwJGXGuVroG5R3tZHNukQUA1wqfTpU2Bp2+t3fQL9n963sEei1cyRkK
kXUVAsdKc6Q06eSZCW3x7T8PMGHk2Y9CsdLofjKVFSMcZP98H0oKKfRtZJj5azhg
S9fFRaG3fwsMz32lGvvgBAJH5DlOZQ==
=8apI
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of simple-xml_2.7.1-3_source.changes

[Debian FTP Masters]

simple-xml_2.7.1-3_source.changes uploaded successfully to localhost
along with the files:
  simple-xml_2.7.1-3.dsc
  simple-xml_2.7.1-3.debian.tar.xz
  simple-xml_2.7.1-3_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

simple-xml_2.7.1-3_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 20 Sep 2019 00:12:59 +0200
Source: simple-xml
Architecture: source
Version: 2.7.1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Closes: 888547
Changes:
 simple-xml (2.7.1-3) unstable; urgency=medium
 .
   * Team upload.
   * Fixed CVE-2017-1000190: XXE vulnerability (Closes: #888547)
   * Enabled the unit tests
   * Standards-Version updated to 4.4.0
Checksums-Sha1:
 3f9d5f4aaf05297faa25cc70641b8ab7ed9f821b 2111 simple-xml_2.7.1-3.dsc
 e08845258a56787bd7e17148bd571513fadd3cf3 5916 simple-xml_2.7.1-3.debian.tar.xz
 0ed5d2a718b518181f498b7887e1e7937ac36177 8565 
simple-xml_2.7.1-3_source.buildinfo
Checksums-Sha256:
 e261346f0594dfbc0b9126d1a96a5368cc7b0279d14e68bf0631dbe923f7cd4e 2111 
simple-xml_2.7.1-3.dsc
 88737dfb2507b74d1ade090c77c271eddc22853d37e596171eced73f4cce0e0b 5916 
simple-xml_2.7.1-3.debian.tar.xz
 0c07e048bbae67e353cc5f7c4ee4ad87e98396204be5c45f69ecd7783e3f5290 8565 
simple-xml_2.7.1-3_source.buildinfo
Files:
 5cf696abd7b86e801842dd85c18d9890 2111 java optional simple-xml_2.7.1-3.dsc
 7825a5aa7896ddbfd539ffa8d4c31fcf 5916 java optional 
simple-xml_2.7.1-3.debian.tar.xz
 62ec76103b0fc53a303dfd17d7c908e8 8565 java optional 
simple-xml_2.7.1-3_source.buildinfo

-BEGIN PGP SIGNATURE-
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=QNmo
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#888547: marked as done (CVE-2017-1000190: XXE vulnerability resulting in SSRF, information disclosure, DoS, etc.)

[Debian Bug Tracking System]

Your message dated Thu, 19 Sep 2019 22:36:33 +
with message-id 
and subject line Bug#888547: fixed in simple-xml 2.7.1-3
has caused the Debian Bug report #888547,
regarding CVE-2017-1000190: XXE vulnerability resulting in SSRF, information 
disclosure, DoS, etc.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
888547: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888547
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: simple-xml
Severity: important
Tags: security

CVE-2017-1000190 has been assigned to this bug in simple-xml:
https://github.com/ngallagher/simplexml/issues/18

Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: simple-xml
Source-Version: 2.7.1-3

We believe that the bug you reported is fixed in the latest version of
simple-xml, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 888...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emmanuel Bourg  (supplier of updated simple-xml package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 20 Sep 2019 00:12:59 +0200
Source: simple-xml
Architecture: source
Version: 2.7.1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Closes: 888547
Changes:
 simple-xml (2.7.1-3) unstable; urgency=medium
 .
   * Team upload.
   * Fixed CVE-2017-1000190: XXE vulnerability (Closes: #888547)
   * Enabled the unit tests
   * Standards-Version updated to 4.4.0
Checksums-Sha1:
 3f9d5f4aaf05297faa25cc70641b8ab7ed9f821b 2111 simple-xml_2.7.1-3.dsc
 e08845258a56787bd7e17148bd571513fadd3cf3 5916 simple-xml_2.7.1-3.debian.tar.xz
 0ed5d2a718b518181f498b7887e1e7937ac36177 8565 
simple-xml_2.7.1-3_source.buildinfo
Checksums-Sha256:
 e261346f0594dfbc0b9126d1a96a5368cc7b0279d14e68bf0631dbe923f7cd4e 2111 
simple-xml_2.7.1-3.dsc
 88737dfb2507b74d1ade090c77c271eddc22853d37e596171eced73f4cce0e0b 5916 
simple-xml_2.7.1-3.debian.tar.xz
 0c07e048bbae67e353cc5f7c4ee4ad87e98396204be5c45f69ecd7783e3f5290 8565 
simple-xml_2.7.1-3_source.buildinfo
Files:
 5cf696abd7b86e801842dd85c18d9890 2111 java optional simple-xml_2.7.1-3.dsc
 7825a5aa7896ddbfd539ffa8d4c31fcf 5916 java optional 
simple-xml_2.7.1-3.debian.tar.xz
 62ec76103b0fc53a303dfd17d7c908e8 8565 java optional 
simple-xml_2.7.1-3_source.buildinfo

-BEGIN PGP SIGNATURE-
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=QNmo
-END PGP SIGNATURE End Message ---
__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of carrotsearch-randomizedtesting_2.1.17-3_source.changes

[Debian FTP Masters]

carrotsearch-randomizedtesting_2.1.17-3_source.changes uploaded successfully to 
localhost
along with the files:
  carrotsearch-randomizedtesting_2.1.17-3.dsc
  carrotsearch-randomizedtesting_2.1.17-3.debian.tar.xz
  carrotsearch-randomizedtesting_2.1.17-3_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

carrotsearch-randomizedtesting_2.1.17-3_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 20 Sep 2019 00:22:05 +0200
Source: carrotsearch-randomizedtesting
Architecture: source
Version: 2.1.17-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java maintainers 

Changed-By: Emmanuel Bourg 
Changes:
 carrotsearch-randomizedtesting (2.1.17-3) unstable; urgency=medium
 .
   * Team upload.
   * Restored the junit4-ant module
   * Standards-Version updated to 4.4.0
   * Switch to debhelper level 11
   * Use salsa.debian.org Vcs-* URLs
Checksums-Sha1:
 d58951a9d71c7333d7a74cda29508e212e82f4b2 2507 
carrotsearch-randomizedtesting_2.1.17-3.dsc
 4d49900d4a1d107d93aee23519d4f64e8bb37bdc 3968 
carrotsearch-randomizedtesting_2.1.17-3.debian.tar.xz
 6f4a1fc8d4f9e6dd96b33936939acd71c5c30102 13898 
carrotsearch-randomizedtesting_2.1.17-3_source.buildinfo
Checksums-Sha256:
 cdba3d92d6a7bbcc7b89b50fb7e850f3300482e6d411793d90cfb4cae1c5 2507 
carrotsearch-randomizedtesting_2.1.17-3.dsc
 1969867a3312b96cbf51f9de9ed144f6e327eb25779bc6c7e8b52cd36346e22e 3968 
carrotsearch-randomizedtesting_2.1.17-3.debian.tar.xz
 f312172425189319cad79d5593f84b7ce34a49d610f7c8059d836b768aa09e50 13898 
carrotsearch-randomizedtesting_2.1.17-3_source.buildinfo
Files:
 6dae7385d5cf1f23561b0052ec6e1d97 2507 java optional 
carrotsearch-randomizedtesting_2.1.17-3.dsc
 759fe1fa37a6657cda94eda11fd87df4 3968 java optional 
carrotsearch-randomizedtesting_2.1.17-3.debian.tar.xz
 923cf100e1bf9212737492575432e6d8 13898 java optional 
carrotsearch-randomizedtesting_2.1.17-3_source.buildinfo

-BEGIN PGP SIGNATURE-
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=ru3g
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

libspring-java: status change on tests.reproducible-builds.org/debian

[Reproducible builds folks]

2019-09-19 11:28 
https://tests.reproducible-builds.org/debian/unstable/amd64/libspring-java 
changed from FTBR -> FTBFS

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of zip4j_2.1.4-1_source.changes

[Debian FTP Masters]

zip4j_2.1.4-1_source.changes uploaded successfully to localhost
along with the files:
  zip4j_2.1.4-1.dsc
  zip4j_2.1.4.orig.tar.gz
  zip4j_2.1.4-1.debian.tar.xz
  zip4j_2.1.4-1_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

zip4j_2.1.4-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 20 Sep 2019 01:30:35 -0400
Source: zip4j
Architecture: source
Version: 2.1.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Andrius Merkys 
Changes:
 zip4j (2.1.4-1) unstable; urgency=medium
 .
   * New upstream version 2.1.4
   * Running tests during build.
Checksums-Sha1:
 8cfe081c47bc41286c7fffaf3e44475e9a1d27ff 2023 zip4j_2.1.4-1.dsc
 aaebdbd7d7724e57cc368ccee82b055f8e8fdd27 1416558 zip4j_2.1.4.orig.tar.gz
 9049ece40e23929a197678dc96294ff3b4730b77 12948 zip4j_2.1.4-1.debian.tar.xz
 2bb8eca3d8f3122625dcf38161e5d7ce08b7bc18 13143 zip4j_2.1.4-1_source.buildinfo
Checksums-Sha256:
 9d53c81e8fd96e83c34b84b62e66acdbc15dfea8de0884b685ca7f722dbee3ab 2023 
zip4j_2.1.4-1.dsc
 21bed08a0ce4cccb19e55770b645fb013ffddd05896ebab06f7a3752ff0c65ae 1416558 
zip4j_2.1.4.orig.tar.gz
 829087b049b13e67394b256d723a9fffba98a55789af6d25f4bb89f85e981554 12948 
zip4j_2.1.4-1.debian.tar.xz
 b8335fcbd829f5301c5bf050415779d25a4bba05f01295994d4a6a7182fc1c61 13143 
zip4j_2.1.4-1_source.buildinfo
Files:
 725d0fb14226bc7f47f23c1893e78ce2 2023 java optional zip4j_2.1.4-1.dsc
 98f45fd3b0dceec0ed77e4b458f2e7d6 1416558 java optional zip4j_2.1.4.orig.tar.gz
 cc770ecce7996c4c2978b9cfdd9e36a7 12948 java optional 
zip4j_2.1.4-1.debian.tar.xz
 645b62db483c64506ba2947978eb9a03 13143 java optional 
zip4j_2.1.4-1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=eUU7
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.