intellij-annotations 19.0.0-1 MIGRATED to testing

2020-02-27 Thread Debian testing watch
FYI: The status of the intellij-annotations source package
in Debian's testing distribution has changed.

  Previous version: 18.0.0-1
  Current version:  19.0.0-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

jython 2.7.2~b3+repack1-1 MIGRATED to testing

2020-02-27 Thread Debian testing watch
FYI: The status of the jython source package
in Debian's testing distribution has changed.

  Previous version: 2.7.2~b2+repack1-1
  Current version:  2.7.2~b3+repack1-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

java3d: status change on tests.reproducible-builds.org/debian

2020-02-27 Thread Reproducible builds folks
2020-02-27 19:50 
https://tests.reproducible-builds.org/debian/unstable/amd64/java3d changed from 
FTBR -> FTBFS

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

multiverse-core: status change on tests.reproducible-builds.org/debian

2020-02-27 Thread Reproducible builds folks
2020-02-27 21:03 
https://tests.reproducible-builds.org/debian/unstable/amd64/multiverse-core 
changed from reproducible -> FTBFS

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#952683: snakeyaml: CVE-2017-18640

2020-02-27 Thread Salvatore Bonaccorso
Source: snakeyaml
Version: 1.25+ds-2
Severity: important
Tags: security upstream
Forwarded: https://bitbucket.org/asomov/snakeyaml/issues/377
Control: found -1 1.23-1
Control: found -1 1.17-1

Hi,

The following vulnerability was published for snakeyaml.

CVE-2017-18640[0]:
| The Alias feature in SnakeYAML 1.18 allows entity expansion during a
| load operation, a related issue to CVE-2003-1564.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-18640
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18640
[1] https://bitbucket.org/asomov/snakeyaml/issues/377
[2] 
https://bitbucket.org/asomov/snakeyaml/commits/b680ce64971d943083012c04690c0ffa9fea6da4

Regards,
Salvatore

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: snakeyaml: CVE-2017-18640

2020-02-27 Thread Debian Bug Tracking System
Processing control commands:

> found -1 1.23-1
Bug #952683 [src:snakeyaml] snakeyaml: CVE-2017-18640
Marked as found in versions snakeyaml/1.23-1.
> found -1 1.17-1
Bug #952683 [src:snakeyaml] snakeyaml: CVE-2017-18640
Marked as found in versions snakeyaml/1.17-1.

-- 
952683: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=952683
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

byteman_4.0.11-1_source.changes ACCEPTED into unstable

2020-02-27 Thread Debian FTP Masters


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Thu, 27 Feb 2020 07:13:34 -0500
Source: byteman
Architecture: source
Version: 4.0.11-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Andrius Merkys 
Changes:
 byteman (4.0.11-1) unstable; urgency=medium
 .
   * New upstream version 4.0.11
Checksums-Sha1:
 245f217ac96e59e56b905588fedf729c8ecede53 2302 byteman_4.0.11-1.dsc
 a392947b18ac1d3b4da1b7a3682a5f5442254ce4 535883 byteman_4.0.11.orig.tar.gz
 b8387bfbc32b920f3bdc6330cd4e24f112cb704e 3928 byteman_4.0.11-1.debian.tar.xz
 575919591ad845ee39dddc24a4464eccacb39837 15400 
byteman_4.0.11-1_source.buildinfo
Checksums-Sha256:
 2e5b0f8c2f8a1f17f33a2b1c5d617d4d37c581b9c8a293f27eb8ca3889755524 2302 
byteman_4.0.11-1.dsc
 8e4af6019702c8b22f354962f35f197f9ba2c8699235aac77ebd9263ac12261b 535883 
byteman_4.0.11.orig.tar.gz
 2f376313fbd74a351b556688306c8acf8d2ab6d5bfcdb52799f636259f27edd7 3928 
byteman_4.0.11-1.debian.tar.xz
 8fb1dbb26d123f50185b965ea7f6928cebcb7029858366b7fdac976f328550c0 15400 
byteman_4.0.11-1_source.buildinfo
Files:
 b735f2ee580b34246fa27b0cbd75e7c6 2302 java optional byteman_4.0.11-1.dsc
 a727ab7430e25174bab049d510738451 535883 java optional 
byteman_4.0.11.orig.tar.gz
 d693dcdde469feb02cb481b766b36f68 3928 java optional 
byteman_4.0.11-1.debian.tar.xz
 ca7f3ef3783818266c1a5a96c8fdd9be 15400 java optional 
byteman_4.0.11-1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=/A5y
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of byteman_4.0.11-1_source.changes

2020-02-27 Thread Debian FTP Masters
byteman_4.0.11-1_source.changes uploaded successfully to localhost
along with the files:
  byteman_4.0.11-1.dsc
  byteman_4.0.11.orig.tar.gz
  byteman_4.0.11-1.debian.tar.xz
  byteman_4.0.11-1_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
.
 Please use
debian-j...@lists.debian.org for discussions and questions.