Bug#720375: libxml-security-java: CVE-2013-2172

2013-08-21 Thread Salvatore Bonaccorso
Package: libxml-security-java
Severity: grave
Tags: security patch upstream fixed-upstream

Hi,

the following vulnerability was published for libxml-security-java.

CVE-2013-2172[0]:
Java XML Signature spoofing attack

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities  Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2172
http://security-tracker.debian.org/tracker/CVE-2013-2172
[1] http://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc
[2] http://svn.apache.org/viewvc?view=revisionrevision=1493772

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#720387: freemind: bogus french transation for find and replace

2013-08-21 Thread Yann Dirson
Package: freemind
Version: 0.9.0+dfsg-2
Severity: important

Find and replace in french would be Chercher et remplacer, not Montrer 
l'historique
de la carte which means Show map history !


-- 
Yann Dirson - Bertin Technologies

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#720388: freemind: fails to locate jgoodies ButtonBarFactory class

2013-08-21 Thread Yann Dirson
Package: freemind
Version: 0.9.0+dfsg-2
Severity: important

Selecting the Find and replace menu entry causes the following exception:

STDERR: Exception in thread AWT-EventQueue-0
STDERR: java.lang.NoClassDefFoundError: 
com/jgoodies/forms/factories/ButtonBarFactory
STDERR: at 
accessories.plugins.time.TimeList.startupMapHook(TimeList.java:298)
STDERR: at 
freemind.modes.mindmapmode.MindMapController.invokeHook(MindMapController.java:1722)
STDERR: at 
freemind.modes.mindmapmode.actions.MindMapControllerHookAction.actionPerformed(MindMapControllerHookAction.java:48)
STDERR: at 
javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2012)
STDERR: at 
javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2335)
STDERR: at 
javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:404)
STDERR: at 
javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
STDERR: at javax.swing.AbstractButton.doClick(AbstractButton.java:374)
STDERR: at 
javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:829)
STDERR: at 
javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:873)
STDERR: at 
java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
STDERR: at java.awt.Component.processMouseEvent(Component.java:6288)
STDERR: at 
javax.swing.JComponent.processMouseEvent(JComponent.java:3267)
STDERR: at java.awt.Component.processEvent(Component.java:6053)
STDERR: at java.awt.Container.processEvent(Container.java:2045)
STDERR: at java.awt.Component.dispatchEventImpl(Component.java:4649)
STDERR: at java.awt.Container.dispatchEventImpl(Container.java:2103)
STDERR: at java.awt.Component.dispatchEvent(Component.java:4475)
STDERR: at 
java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4633)
STDERR: at 
java.awt.LightweightDispatcher.processMouseEvent(Container.java:4297)
STDERR: at 
java.awt.LightweightDispatcher.dispatchEvent(Container.java:4227)
STDERR: at java.awt.Container.dispatchEventImpl(Container.java:2089)
STDERR: at java.awt.Window.dispatchEventImpl(Window.java:2587)
STDERR: at java.awt.Component.dispatchEvent(Component.java:4475)
STDERR: at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:675)
STDERR: at java.awt.EventQueue.access$300(EventQueue.java:96)
STDERR: at java.awt.EventQueue$2.run(EventQueue.java:634)
STDERR: at java.awt.EventQueue$2.run(EventQueue.java:632)
STDERR: at java.security.AccessController.doPrivileged(Native Method)
STDERR: at 
java.security.AccessControlContext$1.doIntersectionPrivilege(AccessControlContext.java:105)
STDERR: at 
java.security.AccessControlContext$1.doIntersectionPrivilege(AccessControlContext.java:116)
STDERR: at java.awt.EventQueue$3.run(EventQueue.java:648)
STDERR: at java.awt.EventQueue$3.run(EventQueue.java:646)
STDERR: at java.security.AccessController.doPrivileged(Native Method)
STDERR: at 
java.security.AccessControlContext$1.doIntersectionPrivilege(AccessControlContext.java:105)
STDERR: at java.awt.EventQueue.dispatchEvent(EventQueue.java:645)
STDERR: at 
java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:275)
STDERR: at 
java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:200)
STDERR: at 
java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:190)
STDERR: at 
java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:185)
STDERR: at 
java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:177)
STDERR: at 
java.awt.EventDispatchThread.run(EventDispatchThread.java:138)
STDERR: Caused by: java.lang.ClassNotFoundException: 
com.jgoodies.forms.factories.ButtonBarFactory
STDERR: at java.net.URLClassLoader$1.run(URLClassLoader.java:217)
STDERR: at java.security.AccessController.doPrivileged(Native Method)
STDERR: at java.net.URLClassLoader.findClass(URLClassLoader.java:205)
STDERR: at java.lang.ClassLoader.loadClass(ClassLoader.java:321)
STDERR: at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:294)
STDERR: at java.lang.ClassLoader.loadClass(ClassLoader.java:266)
STDERR: ... 42 more


-- 
Yann Dirson - Bertin Technologies

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#720390: freemind: showing preferences fails with IllegalAccessError

2013-08-21 Thread Yann Dirson
Package: freemind
Version: 0.9.0+dfsg-2
Severity: important

Selecting the Preferences menu entry causes the following exception:

STDERR: Exception in thread AWT-EventQueue-0 
STDERR: java.lang.IllegalAccessError: tried to access method 
com.jgoodies.forms.layout.RowSpec.init(Ljava/lang/String;)V from class 
freemind.preferences.layout.OptionPanel$KeyProperty
STDERR: at 
freemind.preferences.layout.OptionPanel$KeyProperty.layout(OptionPanel.java:403)
STDERR: at 
freemind.preferences.layout.OptionPanel.buildPanel(OptionPanel.java:205)
STDERR: at 
freemind.controller.Controller$PropertyAction.actionPerformed(Controller.java:1500)
STDERR: at 
javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2012)
STDERR: at 
javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2335)
STDERR: at 
javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:404)
STDERR: at 
javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
STDERR: at javax.swing.AbstractButton.doClick(AbstractButton.java:374)
STDERR: at 
javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:829)
STDERR: at 
javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:873)
STDERR: at java.awt.Component.processMouseEvent(Component.java:6288)
STDERR: at 
javax.swing.JComponent.processMouseEvent(JComponent.java:3267)
STDERR: at java.awt.Component.processEvent(Component.java:6053)
STDERR: at java.awt.Container.processEvent(Container.java:2045)
STDERR: at java.awt.Component.dispatchEventImpl(Component.java:4649)
STDERR: at java.awt.Container.dispatchEventImpl(Container.java:2103)
STDERR: at java.awt.Component.dispatchEvent(Component.java:4475)
STDERR: at 
java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4633)
STDERR: at 
java.awt.LightweightDispatcher.processMouseEvent(Container.java:4297)
STDERR: at 
java.awt.LightweightDispatcher.dispatchEvent(Container.java:4227)
STDERR: at java.awt.Container.dispatchEventImpl(Container.java:2089)
STDERR: at java.awt.Window.dispatchEventImpl(Window.java:2587)
STDERR: at java.awt.Component.dispatchEvent(Component.java:4475)
STDERR: at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:675)
STDERR: at java.awt.EventQueue.access$300(EventQueue.java:96)
STDERR: at java.awt.EventQueue$2.run(EventQueue.java:634)
STDERR: at java.awt.EventQueue$2.run(EventQueue.java:632)
STDERR: at java.security.AccessController.doPrivileged(Native Method)
STDERR: at 
java.security.AccessControlContext$1.doIntersectionPrivilege(AccessControlContext.java:105)
STDERR: at 
java.security.AccessControlContext$1.doIntersectionPrivilege(AccessControlContext.java:116)
STDERR: at java.awt.EventQueue$3.run(EventQueue.java:648)
STDERR: at java.awt.EventQueue$3.run(EventQueue.java:646)
STDERR: at java.security.AccessController.doPrivileged(Native Method)
STDERR: at 
java.security.AccessControlContext$1.doIntersectionPrivilege(AccessControlContext.java:105)
STDERR: at java.awt.EventQueue.dispatchEvent(EventQueue.java:645)
STDERR: at 
java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:275)
STDERR: at 
java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:200)
STDERR: at 
java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:190)
STDERR: at 
java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:185)
STDERR: at 
java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:177)
STDERR: at 
java.awt.EventDispatchThread.run(EventDispatchThread.java:138)


-- 
Yann Dirson - Bertin Technologies

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#720387: freemind: several bugus french translations

2013-08-21 Thread Yann Dirson
retitle 720387 freemind: several bugus french translations
thanks

Another one: Preferences should be Préférences, not Propriétés.

Could it be that this software is using a sub-standard way of handling
translations, instead of something like gettext ?

-- 
Yann Dirson - Bertin Technologies

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#692728: GeoGebra licence and GPL violation

2013-08-21 Thread Stuart Prescott
Hi Markus,

thanks for your reply -- talk to you more once things settle down in the new 
academic year.

regards
Stuart

-- 
Stuart Prescotthttp://www.nanonanonano.net/   stu...@nanonanonano.net
Debian Developer   http://www.debian.org/ stu...@debian.org
GPG fingerprintBE65 FD1E F4EA 08F3 23D4 3C6D 9FE8 B8CD 71C5 D1A8
GPG fingerprint90E2 D2C1 AD14 6A1B 7EBB 891D BBC1 7EBB 1396 F2F7


signature.asc
Description: This is a digitally signed message part.
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of joda-convert_1.4-1_amd64.changes

2013-08-21 Thread Debian FTP Masters
joda-convert_1.4-1_amd64.changes uploaded successfully to localhost
along with the files:
  joda-convert_1.4-1.dsc
  joda-convert_1.4.orig.tar.gz
  joda-convert_1.4-1.debian.tar.gz
  libjoda-convert-java_1.4-1_all.deb
  libjoda-convert-java-doc_1.4-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


joda-convert_1.4-1_amd64.changes ACCEPTED into unstable

2013-08-21 Thread Debian FTP Masters


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Wed, 21 Aug 2013 15:13:41 +0200
Source: joda-convert
Binary: libjoda-convert-java libjoda-convert-java-doc
Architecture: source all
Version: 1.4-1
Distribution: unstable
Urgency: low
Maintainer: Debian Java Maintainers 
pkg-java-maintainers@lists.alioth.debian.org
Changed-By: Emmanuel Bourg ebo...@apache.org
Description: 
 libjoda-convert-java - Joda Convert - Java API to convert Objects to and from 
Strings
 libjoda-convert-java-doc - Documentation for Joda Convert
Changes: 
 joda-convert (1.4-1) unstable; urgency=low
 .
   * New upstream release
   * Added a patch to remove the prerequisite on Maven 3
   * Ignore the maven-checkstyle-plugin and the Github's site-maven-plugin
   * New dependency on libmaven-bundle-plugin-java to generate the OSGi metadata
   * debian/control:
 - Use canonical URLs for the Vcs-* fields
 - Updated the homepage
 - Improved the package description
   * debian/copyright: Updated the copyright year
Checksums-Sha1: 
 5764e8373c34a69ce47e5f98bde6b249c98e4c77 2215 joda-convert_1.4-1.dsc
 aa9eb7b669ea2e6f87fefa38bf77aecd23e805d1 31065 joda-convert_1.4.orig.tar.gz
 6700280968d55be558c6e199e236b0a260bbcce8 3761 joda-convert_1.4-1.debian.tar.gz
 346a46ca413494eac7b8c48e7466fa8c576e9b0e 45528 
libjoda-convert-java_1.4-1_all.deb
 1ce9200503c4dfd0bd3be18f5ad7ec1a05b0b8dd 83170 
libjoda-convert-java-doc_1.4-1_all.deb
Checksums-Sha256: 
 bd3bd60411d7ca8fb0cc91d3cb007a1427ac51dc8cb551ff472f27f602879139 2215 
joda-convert_1.4-1.dsc
 70e694ffde35132b6405e3c8f545b81a09b757d6750e0e88b732c78fc45f01e5 31065 
joda-convert_1.4.orig.tar.gz
 1af7e60e66e4fc85519456e9004bc1785b808950c080d4fec6401885eb687823 3761 
joda-convert_1.4-1.debian.tar.gz
 8dcebfa7d5d4522ed91babe1876c625a1eb30228b4a84db27c6dad486c3660a6 45528 
libjoda-convert-java_1.4-1_all.deb
 d232970b80a43c51b732d42115a132bab3daa8e8f3813b26ed9f35e56ed9e01d 83170 
libjoda-convert-java-doc_1.4-1_all.deb
Files: 
 1609b0e8811235d6fecc5b13034d2fe7 2215 java optional joda-convert_1.4-1.dsc
 1dcdeaf4bd3af067e31f430298c7b2ca 31065 java optional 
joda-convert_1.4.orig.tar.gz
 678e519892968cb2635ca1905eecd5cb 3761 java optional 
joda-convert_1.4-1.debian.tar.gz
 7baf29f4ab24adfb15e7855a7d12074f 45528 java optional 
libjoda-convert-java_1.4-1_all.deb
 8a2df8e4b5afd6a5e49a4d8ba95f74f0 83170 doc optional 
libjoda-convert-java-doc_1.4-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.14 (GNU/Linux)
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=jemD
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Processing of properties-maven-plugin_1.0~alpha2-1_amd64.changes

2013-08-21 Thread Debian FTP Masters
properties-maven-plugin_1.0~alpha2-1_amd64.changes uploaded successfully to 
localhost
along with the files:
  properties-maven-plugin_1.0~alpha2-1.dsc
  properties-maven-plugin_1.0~alpha2.orig.tar.bz2
  properties-maven-plugin_1.0~alpha2-1.debian.tar.gz
  libproperties-maven-plugin-java_1.0~alpha2-1_all.deb
  libproperties-maven-plugin-java-doc_1.0~alpha2-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


properties-maven-plugin_1.0~alpha2-1_amd64.changes is NEW

2013-08-21 Thread Debian FTP Masters
binary:libproperties-maven-plugin-java is NEW.
binary:libproperties-maven-plugin-java-doc is NEW.
source:properties-maven-plugin is NEW.

Your package contains new components which requires manual editing of
the override file.  It is ok otherwise, so please be patient.  New
packages are usually added to the override file about once a week.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.