Bug#732708: jenkins: CVE-2013-5573

[Moritz Muehlenhoff]

Package: jenkins
Severity: important
Tags: security

Please see http://seclists.org/fulldisclosure/2013/Dec/159

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

saxonhe 9.4.0.7.dfsg-1 MIGRATED to testing

[Debian testing watch]

FYI: The status of the saxonhe source package
in Debian's testing distribution has changed.

  Previous version: (not in testing)
  Current version:  9.4.0.7.dfsg-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

jformatstring 0.10~20131207-1 MIGRATED to testing

[Debian testing watch]

FYI: The status of the jformatstring source package
in Debian's testing distribution has changed.

  Previous version: 0.10~20081016-2
  Current version:  0.10~20131207-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: tagging 732708

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> tags 732708 + fixed-upstream
Bug #732708 [jenkins] jenkins: CVE-2013-5573
Added tag(s) fixed-upstream.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
732708: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732708
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of maven-archiver_2.5-1_amd64.changes

[Debian FTP Masters]

maven-archiver_2.5-1_amd64.changes uploaded successfully to localhost
along with the files:
  maven-archiver_2.5-1.dsc
  maven-archiver_2.5.orig.tar.xz
  maven-archiver_2.5-1.debian.tar.gz
  libmaven-archiver-java_2.5-1_all.deb
  libmaven-archiver-java-doc_2.5-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

maven-archiver_2.5-1_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Wed, 18 Dec 2013 11:14:51 +0100
Source: maven-archiver
Binary: libmaven-archiver-java libmaven-archiver-java-doc
Architecture: source all
Version: 2.5-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description: 
 libmaven-archiver-java - Archiver component for Maven
 libmaven-archiver-java-doc - Archiver component for Maven - API documentation
Changes: 
 maven-archiver (2.5-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
   * Added a patch to run the tests with maven-artifact 2.2. The tests are still
 disabled until plexus-archiver is upgraded to 2.2 or later.
   * debian/control:
 - Use canonical URLs for the Vcs-* fields
 - Standards-Version updated to 3.9.5 (no changes)
   * Switch to debhelper level 9
   * debian/copyright: Updated to the Copyright Format 1.0
   * debian/orig-tar.sh:
 - Do not remove the jars used as test elements
 - Use XZ compression for the upstream tarball
Checksums-Sha1: 
 013c928cc728a89c03364f6867f093f03df66de0 2384 maven-archiver_2.5-1.dsc
 ea78b19937e1a3825ab367c1447e7cd437edc9e5 35444 maven-archiver_2.5.orig.tar.xz
 1278132d3f28538b9299edae7ad5f26b970a83e6 5111 
maven-archiver_2.5-1.debian.tar.gz
 ac1a0d9606db35ed9d3f5485c546d4aedcf22780 18514 
libmaven-archiver-java_2.5-1_all.deb
 d515eb6396ae82eb1dc7e02d10266fbf4d9f688b 89454 
libmaven-archiver-java-doc_2.5-1_all.deb
Checksums-Sha256: 
 682c3da4d3493072bd0177ff2f72d1e2bdedb9835d5b48e52ac74dd08f47e1d5 2384 
maven-archiver_2.5-1.dsc
 0f9af4c935a18854eb8412cf8899971e49cdbd67bc685464fde738f7558f797e 35444 
maven-archiver_2.5.orig.tar.xz
 5f5ff381f6b810b7e67f44c383eb952daf82be1855bb5d0102fcde171169bad2 5111 
maven-archiver_2.5-1.debian.tar.gz
 4f27b0a526fca4590765cae9f352775ca6a82d2bab869a6eaa32b3c29ef0ff99 18514 
libmaven-archiver-java_2.5-1_all.deb
 83ac85a95fc13e9868fa9757238d01ea0ceaafb6147ae206258d89609182f0aa 89454 
libmaven-archiver-java-doc_2.5-1_all.deb
Files: 
 deea0b7b90be47b92631c5c38f478d1b 2384 java optional maven-archiver_2.5-1.dsc
 4a70f3a599b154a0f2f9c10277e42914 35444 java optional 
maven-archiver_2.5.orig.tar.xz
 ec6870d6ad781bc92d1ad5ecdd09de66 5111 java optional 
maven-archiver_2.5-1.debian.tar.gz
 59f8db1da9a7d94344b941f45ad28b99 18514 java optional 
libmaven-archiver-java_2.5-1_all.deb
 7c141c5cc675b9ac377252e3b66a81f8 89454 doc optional 
libmaven-archiver-java-doc_2.5-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.15 (GNU/Linux)
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=vDbA
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#732752: New upstream release 6.0

[Jackson Doak]

Package: javacc
Priority: wishlist
Version: 5.0-5

There is a new major release of javacc is available at
https://javacc.java.net/ , could debian please package it?
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.