Bug#745897: fixed in libstruts1.2-java 1.2.9-9

2014-06-14 Thread Hideki Yamane 
Hi,

On Sun, 1 Jun 2014 15:03:20 +0900
Nobuhiro Ban  wrote:
> >+protected static final Pattern CLASS_ACCESS_PATTERN = Pattern
> >+.compile("(.*\\.|^|.*|\\[('|\"))class(\\.|('|\")]|\\[).*",
> >+Pattern.CASE_INSENSITIVE);
> 
> It's very strange regexp. Because we know (P1|.*|P2) == .* .
> This pattern will match to words other than "class", eg. "fooClass".

 Any class should be accepted, maybe it'd cause some
 trouble but non-class should not named as *class, IMHO.


-- 
Hideki Yamane 

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#745897: closed by Hideki Yamane (Bug#745897: fixed in libstruts1.2-java 1.2.9-9)

2014-06-14 Thread Hideki Yamane 
Hi Emmanuel,

>>commons-beanutils (1.9.2-1) unstable; urgency=medium
>>
>>  * New upstream release
>>  * Disabled the BeanMap test which relies on a class not packaged in Debian
>>  * Moved the package to Git
>>
>> -- Emmanuel Bourg   Fri, 30 May 2014 13:58:47 +0200

 You mean, struts1 calls BeanUtils.populate and we should add check logic
 in commons-beanutils and 1.9.2 is fixed version, right?

 
https://github.com/apache/struts1/blob/STRUTS_1_2_BRANCH/src/share/org/apache/struts/util/RequestUtils.java#L493


 Then, question: commons-beanutils version in Debian is
>>  oldstable   :1.8.3-1 
>>   stable :1.8.3-3 

 both seems to be still vulunerable version. Can you provide security-
 backport patch for them? If not, patch to struts1 is still usefull to 
 prevent attack, so push fix to libstruts1.2-java stable/oldstable, right?

-- 
Hideki Yamane 

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

lwjgl is marked for autoremoval from testing

2014-06-14 Thread Debian testing autoremoval watch 
lwjgl 2.7.1+dfsg-3 is marked for autoremoval from testing on 2014-06-29

It is affected by these RC bugs:
749957: lwjgl: FTBFS - build-conflicts binutils-gold (which binutils provides)


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

simple-xml 2.7.1-1 MIGRATED to testing

2014-06-14 Thread Debian testing watch 
FYI: The status of the simple-xml source package
in Debian's testing distribution has changed.

  Previous version: 2.3.2-1
  Current version:  2.7.1-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

libowasp-esapi-java 2.1.0-2 MIGRATED to testing

2014-06-14 Thread Debian testing watch 
FYI: The status of the libowasp-esapi-java source package
in Debian's testing distribution has changed.

  Previous version: (not in testing)
  Current version:  2.1.0-2

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#750454: marked as done (tomcat7 7.0.54 requires libtcnative-1 1.1.30 if the APR connector is used)

2014-06-14 Thread Debian Bug Tracking System 
Your message dated Sat, 14 Jun 2014 16:22:33 +
with message-id 
and subject line Bug#750454: fixed in tomcat7 7.0.54-2
has caused the Debian Bug report #750454,
regarding tomcat7 7.0.54 requires libtcnative-1 1.1.30 if the APR connector is 
used
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
750454: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750454
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: tomcat7
Version: 7.0.54-1
Severity: normal

Dear Maintainer,

As reported in the IRC channel, using the APR connector with this version is 
impossible as
it requires version 1.1.30 of libtcnative-1 package, the current version is 
1.1.29-1


-- System Information:
Debian Release: 7.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/24 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
Source: tomcat7
Source-Version: 7.0.54-2

We believe that the bug you reported is fixed in the latest version of
tomcat7, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 750...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
tony mancill  (supplier of updated tomcat7 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 14 Jun 2014 08:09:02 -0700
Source: tomcat7
Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java 
libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs
Architecture: source all
Version: 7.0.54-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: tony mancill 
Description:
 libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes
 libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation
 libtomcat7-java - Servlet and JSP engine -- core libraries
 tomcat7- Servlet and JSP engine
 tomcat7-admin - Servlet and JSP engine -- admin web applications
 tomcat7-common - Servlet and JSP engine -- common files
 tomcat7-docs - Servlet and JSP engine -- documentation
 tomcat7-examples - Servlet and JSP engine -- example web applications
 tomcat7-user - Servlet and JSP engine -- tools to create user instances
Closes: 714349 750454
Changes:
 tomcat7 (7.0.54-2) unstable; urgency=medium
 .
   [ Emmanuel Bourg ]
   * debian/defaults.template: Bumped the required version of Java mentioned
 in the comment on the JAVA_HOME variable
   * debian/tomcat7.init: Search for OpenJDK 8 and Oracle JDKs when starting
 the server (Closes: #714349)
   * Updated the version required for libtcnative-1 (>= 1.1.30)
 (Closes: #750454)
Checksums-Sha1:
 1c9bad402c29fedf8bc47ccdadc89b3a24a81208 2732 tomcat7_7.0.54-2.dsc
 842fc240b7f72e64f6219a09f081e6f93c53d0ce 41532 tomcat7_7.0.54-2.debian.tar.xz
 a31bb49e62c34df6a931faeb01ad8ddff6c6cbdc 60392 tomcat7-common_7.0.54-2_all.deb
 7808ed81c9b85c6ed1d63f56eb3750b77fef7968 49286 tomcat7_7.0.54-2_all.deb
 d8dd70aea8c18a44886953f9e051d853c74dc25d 36904 tomcat7-user_7.0.54-2_all.deb
 fa5838e5d8834b9a1cace50aa3887d18c90626b4 3664936 
libtomcat7-java_7.0.54-2_all.deb
 0f0fe52ee6675ed7251176065a786ff31243815d 312556 
libservlet3.0-java_7.0.54-2_all.deb
 2dbcfb9bc6b0ce9e31d5d08832e85d78dd0328d3 203884 
libservlet3.0-java-doc_7.0.54-2_all.deb
 c12ad9e603358173499102dc8e7d284cdcba5be7 37948 tomcat7-admin_7.0.54-2_all.deb
 d1be45dd321692b0e9e596c6803b99fd3c97be46 194928 
tomcat7-examples_7.0.54-2_all.deb
 ec8ddf924b7f9b600fd86a20e532204069f74f78 596276 tomcat7-docs_7.0.54-2_all.deb
Checksums-Sha256:
 f13692cc94898af076eb3866812bf5a61a20f03a2328ca377fd61358e1e799a6 2732 
tomcat7_7.0.54-2.dsc
 79968a81d4c5ce6fb486797b082a1b40d74734de56a868e600bb206d140e4722 41532 
tomcat7_7.0.54-2.debian.tar.xz
 189e174472695b8bf8d59595eba1ec7c0a4ed2bcb0a54fdd8f70db8e1516f7d4 60392 
tomcat7-common_7.0.54-2_all.deb
 45fcd1c973232bb2fc647aba83b0dcca58afc8c01549f477cd5b967b43d104a4 49286 
tomcat7_7.0.54-2_all.deb
 0df261ef7b4f6291d8978f3bd497c2460811603749fe9720902c8a5640b36ec5 36904 
tomcat7-user_7.0.54-2_all

Bug#714349: marked as done (Also search for Java paths used by java-package)

2014-06-14 Thread Debian Bug Tracking System 
Your message dated Sat, 14 Jun 2014 16:22:33 +
with message-id 
and subject line Bug#714349: fixed in tomcat7 7.0.54-2
has caused the Debian Bug report #714349,
regarding Also search for Java paths used by java-package
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
714349: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714349
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: tomcat7
Severity: wishlist

Hi,

The init script looks in a number of places for JDK and JRE to start Tomcat
with. My JRE is created by 'java-package' and is found in
/usr/lib/jvm/jre-7-oracle-x64/ but this location is not found by the
init script.

Perhaps the locations used by java-package can be included in the search?


Thanks,
Thijs

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.9-1-amd64 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
Source: tomcat7
Source-Version: 7.0.54-2

We believe that the bug you reported is fixed in the latest version of
tomcat7, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 714...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
tony mancill  (supplier of updated tomcat7 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 14 Jun 2014 08:09:02 -0700
Source: tomcat7
Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java 
libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs
Architecture: source all
Version: 7.0.54-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: tony mancill 
Description:
 libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes
 libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation
 libtomcat7-java - Servlet and JSP engine -- core libraries
 tomcat7- Servlet and JSP engine
 tomcat7-admin - Servlet and JSP engine -- admin web applications
 tomcat7-common - Servlet and JSP engine -- common files
 tomcat7-docs - Servlet and JSP engine -- documentation
 tomcat7-examples - Servlet and JSP engine -- example web applications
 tomcat7-user - Servlet and JSP engine -- tools to create user instances
Closes: 714349 750454
Changes:
 tomcat7 (7.0.54-2) unstable; urgency=medium
 .
   [ Emmanuel Bourg ]
   * debian/defaults.template: Bumped the required version of Java mentioned
 in the comment on the JAVA_HOME variable
   * debian/tomcat7.init: Search for OpenJDK 8 and Oracle JDKs when starting
 the server (Closes: #714349)
   * Updated the version required for libtcnative-1 (>= 1.1.30)
 (Closes: #750454)
Checksums-Sha1:
 1c9bad402c29fedf8bc47ccdadc89b3a24a81208 2732 tomcat7_7.0.54-2.dsc
 842fc240b7f72e64f6219a09f081e6f93c53d0ce 41532 tomcat7_7.0.54-2.debian.tar.xz
 a31bb49e62c34df6a931faeb01ad8ddff6c6cbdc 60392 tomcat7-common_7.0.54-2_all.deb
 7808ed81c9b85c6ed1d63f56eb3750b77fef7968 49286 tomcat7_7.0.54-2_all.deb
 d8dd70aea8c18a44886953f9e051d853c74dc25d 36904 tomcat7-user_7.0.54-2_all.deb
 fa5838e5d8834b9a1cace50aa3887d18c90626b4 3664936 
libtomcat7-java_7.0.54-2_all.deb
 0f0fe52ee6675ed7251176065a786ff31243815d 312556 
libservlet3.0-java_7.0.54-2_all.deb
 2dbcfb9bc6b0ce9e31d5d08832e85d78dd0328d3 203884 
libservlet3.0-java-doc_7.0.54-2_all.deb
 c12ad9e603358173499102dc8e7d284cdcba5be7 37948 tomcat7-admin_7.0.54-2_all.deb
 d1be45dd321692b0e9e596c6803b99fd3c97be46 194928 
tomcat7-examples_7.0.54-2_all.deb
 ec8ddf924b7f9b600fd86a20e532204069f74f78 596276 tomcat7-docs_7.0.54-2_all.deb
Checksums-Sha256:
 f13692cc94898af076eb3866812bf5a61a20f03a2328ca377fd61358e1e799a6 2732 
tomcat7_7.0.54-2.dsc
 79968a81d4c5ce6fb486797b082a1b40d74734de56a868e600bb206d140e4722 41532 
tomcat7_7.0.54-2.debian.tar.xz
 189e174472695b8bf8d59595eba1ec7c0a4ed2bcb0a54fdd8f70db8e1516f7d4 60392 
tomcat7-common_7.0.54-2_all.deb
 45fcd1c973232bb2fc647aba83b0dcca58afc8c01549f477cd5b967b43d104a4 49286 
tomcat7_7.0.54-2_all.deb
 0df261ef7b4f6291d8978f3bd497c2460811603749

tomcat7_7.0.54-2_amd64.changes ACCEPTED into unstable

2014-06-14 Thread Debian FTP Masters 


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 14 Jun 2014 08:09:02 -0700
Source: tomcat7
Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java 
libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs
Architecture: source all
Version: 7.0.54-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: tony mancill 
Description:
 libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes
 libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation
 libtomcat7-java - Servlet and JSP engine -- core libraries
 tomcat7- Servlet and JSP engine
 tomcat7-admin - Servlet and JSP engine -- admin web applications
 tomcat7-common - Servlet and JSP engine -- common files
 tomcat7-docs - Servlet and JSP engine -- documentation
 tomcat7-examples - Servlet and JSP engine -- example web applications
 tomcat7-user - Servlet and JSP engine -- tools to create user instances
Closes: 714349 750454
Changes:
 tomcat7 (7.0.54-2) unstable; urgency=medium
 .
   [ Emmanuel Bourg ]
   * debian/defaults.template: Bumped the required version of Java mentioned
 in the comment on the JAVA_HOME variable
   * debian/tomcat7.init: Search for OpenJDK 8 and Oracle JDKs when starting
 the server (Closes: #714349)
   * Updated the version required for libtcnative-1 (>= 1.1.30)
 (Closes: #750454)
Checksums-Sha1:
 1c9bad402c29fedf8bc47ccdadc89b3a24a81208 2732 tomcat7_7.0.54-2.dsc
 842fc240b7f72e64f6219a09f081e6f93c53d0ce 41532 tomcat7_7.0.54-2.debian.tar.xz
 a31bb49e62c34df6a931faeb01ad8ddff6c6cbdc 60392 tomcat7-common_7.0.54-2_all.deb
 7808ed81c9b85c6ed1d63f56eb3750b77fef7968 49286 tomcat7_7.0.54-2_all.deb
 d8dd70aea8c18a44886953f9e051d853c74dc25d 36904 tomcat7-user_7.0.54-2_all.deb
 fa5838e5d8834b9a1cace50aa3887d18c90626b4 3664936 
libtomcat7-java_7.0.54-2_all.deb
 0f0fe52ee6675ed7251176065a786ff31243815d 312556 
libservlet3.0-java_7.0.54-2_all.deb
 2dbcfb9bc6b0ce9e31d5d08832e85d78dd0328d3 203884 
libservlet3.0-java-doc_7.0.54-2_all.deb
 c12ad9e603358173499102dc8e7d284cdcba5be7 37948 tomcat7-admin_7.0.54-2_all.deb
 d1be45dd321692b0e9e596c6803b99fd3c97be46 194928 
tomcat7-examples_7.0.54-2_all.deb
 ec8ddf924b7f9b600fd86a20e532204069f74f78 596276 tomcat7-docs_7.0.54-2_all.deb
Checksums-Sha256:
 f13692cc94898af076eb3866812bf5a61a20f03a2328ca377fd61358e1e799a6 2732 
tomcat7_7.0.54-2.dsc
 79968a81d4c5ce6fb486797b082a1b40d74734de56a868e600bb206d140e4722 41532 
tomcat7_7.0.54-2.debian.tar.xz
 189e174472695b8bf8d59595eba1ec7c0a4ed2bcb0a54fdd8f70db8e1516f7d4 60392 
tomcat7-common_7.0.54-2_all.deb
 45fcd1c973232bb2fc647aba83b0dcca58afc8c01549f477cd5b967b43d104a4 49286 
tomcat7_7.0.54-2_all.deb
 0df261ef7b4f6291d8978f3bd497c2460811603749fe9720902c8a5640b36ec5 36904 
tomcat7-user_7.0.54-2_all.deb
 b40a9b795160e8157bd2d83902f8a79b3ada704f02c7285b0f6866200bb1c11e 3664936 
libtomcat7-java_7.0.54-2_all.deb
 334772dc5e018e0224961c6bf3fdc278fb09c2684d8a780386408722d522c362 312556 
libservlet3.0-java_7.0.54-2_all.deb
 1959e7badc64ea65d706ab24e5fe8c17c11ea9c382ac4766fa8c3def76645373 203884 
libservlet3.0-java-doc_7.0.54-2_all.deb
 35f9b2b90dd8e912d10c60757f70af35ec52fa8835c995a5bdb595cf5ca904c1 37948 
tomcat7-admin_7.0.54-2_all.deb
 65f044835c6bba8ae3b3c3f14906e3bcd5128f53c3aa9c58015f38b7b6e0beae 194928 
tomcat7-examples_7.0.54-2_all.deb
 88c41f9bcc3db92df6a30a5968be2d4828a0310061623f167fd846a48ae980f5 596276 
tomcat7-docs_7.0.54-2_all.deb
Files:
 3aa23ade45cc81536096b23059e5e580 60392 java optional 
tomcat7-common_7.0.54-2_all.deb
 011c05245181391f9a4e6492a79add2e 49286 java optional tomcat7_7.0.54-2_all.deb
 6c06daab9375d8e961ce69df443aec17 36904 java optional 
tomcat7-user_7.0.54-2_all.deb
 9d09e19d99cd3657f897c84418090357 3664936 java optional 
libtomcat7-java_7.0.54-2_all.deb
 b1beb8c5317a9e40aa9dd688dfbed4b8 312556 java optional 
libservlet3.0-java_7.0.54-2_all.deb
 245fab13b36792fe214f66a9a82469ea 203884 doc optional 
libservlet3.0-java-doc_7.0.54-2_all.deb
 5231f687b1ecc6b663199c3e8d2825ce 37948 java optional 
tomcat7-admin_7.0.54-2_all.deb
 54e829f67edf746b16f35bcb90e8b510 194928 java optional 
tomcat7-examples_7.0.54-2_all.deb
 61b1bc27459d48d75ecb70b570f320b6 596276 doc optional 
tomcat7-docs_7.0.54-2_all.deb
 ecedc100cbd62bff9690f1d1fac809ac 2732 java optional tomcat7_7.0.54-2.dsc
 f9af8425319d23da513113adee4a9b8c 41532 java optional 
tomcat7_7.0.54-2.debian.tar.xz

-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iQIcBAEBCgAGBQJTnHEeAAoJECHSBYmXSz6WbksP/349chR79SkOm2Z0/f2X7OS9
ppzIiANj5/+UXqdrJglMV/8i7eKpXTAlMUd9PHtihPNGA52jyKF8WZc4WQyb2sdX
Wad0d65d38hKeQF4Ib8lXgwzo0QZ+ZE5ftam4dd+skQOeFFqq7xZl5rre1pWrozk
8p2YX92PcNfjd+oWOigm/XLMU/w32kzT/3MQy3RRDJF1PjtylIHyNHSe6Az1xb9I
M5IRCv7hAAv6seBlMJlwIQPsjrjqxN+tqBppKaNs2JjwAWh8V7EU3B2BVe/KMuTl
EPhFRnTYATSEIQGNvKqzjMcxrrkh/7QtPDId6HkInEbTsUHMPRqKfidbXDoVNI2B
z2EKJY2/y9AEBGqrg7i03gGHjVpQhKmSEctasdTaUzguhaiAYaGebDafP7vD0Tpn
lEOXqdffG+qi/4y/8hsDqiJit+E/76ebpBk8r/4x25jZ5UbKx+sz86wk26GNf

Bug#751563: tuxguitar: depends on xulrunner which is no more

2014-06-14 Thread tony mancill 
On 06/14/2014 04:52 AM, gregor herrmann wrote:
> On Sat, 14 Jun 2014 12:04:00 +0200, Emilio Pozuelo Monfort wrote:
> 
>> Your package depends on:
>> xulrunner-29 | xulrunner-24.0 | xulrunner-17.0 | xulrunner-10.0 | 
>> xulrunner-1.9.1
>>
>> But iceweasel no longer provides a xulrunner binary. Note that the iceweasel 
>> binary
>> itself ships libxul.so now, so perhaps adding iceweasel (>= 30) as an 
>> alternative
>> might be enough, if that's what tuxguitar needs.
> 
> I've looked into this issue now a bit, and so far I've found:
> 
> - misc/tuxguitar.sh (patched 2 times by us) looks for libxpcom.so in
>   various mozilla/firefox/iceweasel/xulrunner directories;
> - and then sets and exports MOZILLA_FIVE_HOME;
> - the last package that contained libxpcom.so was xulrunner-1.9.1;
> - so since ages MOZILLA_FIVE_HOME wasn't set anymore;
> - for Ubuntu the dependency and this guessing in the wrapper script
>   doesn't exist;
> - a comment in the script say:
>   #/// org.eclipse.swt.SWTError: No more handles
>   #/// [Unknown Mozilla path (MOZILLA_FIVE_HOME not set)]
> 
> My tentative conclusion is that MOZILLA_FIVE_HOME was needed at some
> time in the past, doesn't get set since ages, which doesn't cause any
> visible problems.
> 
> So it seems like we can just drop this whole xulrunner/iceweasel
> machinery from debian/{rules,control} and patch misc/tuxguitar.sh
> again to drop it. (And all efforts to update the xulrunner list in
> unstable and also stable was probably in vain.)
> 
> If for some reason having MOZILLA_FIVE_HOME would be good, we need a
> different way to set it. - The web is still full of errors about it,
> and the solution seems to be to set it to /usr/lib/iceweasel or
> /usr/lib/firefox or /usr/lib/mozilla/.
> 
> Maybe someone who knows SWT can shed some light on the question?
> 
> 
> Cheers,
> gregor

Hi Gregor,

Thanks for digging into this.  I suggest we move forward with pulling
out the MOZILLA_FIVE_HOME mechanism and do some testing.  I can work on
that.

Cheers,
tony




signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of tomcat7_7.0.54-2_amd64.changes

2014-06-14 Thread Debian FTP Masters 
tomcat7_7.0.54-2_amd64.changes uploaded successfully to localhost
along with the files:
  tomcat7-common_7.0.54-2_all.deb
  tomcat7_7.0.54-2_all.deb
  tomcat7-user_7.0.54-2_all.deb
  libtomcat7-java_7.0.54-2_all.deb
  libservlet3.0-java_7.0.54-2_all.deb
  libservlet3.0-java-doc_7.0.54-2_all.deb
  tomcat7-admin_7.0.54-2_all.deb
  tomcat7-examples_7.0.54-2_all.deb
  tomcat7-docs_7.0.54-2_all.deb
  tomcat7_7.0.54-2.dsc
  tomcat7_7.0.54-2.debian.tar.xz

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#750643: antlr: missing licence for PyANTLR

2014-06-14 Thread wolfgang haefelinger 
Hello,


*That being said, I do not know why the antlr *.jar file includes the
Python code, as it does not need to. If the antlr upstream distributes the
binary *.jar file with it, thiswill not be a problem.*

This sentence is still confusing. It is a fact that antlr2-*.jar does not
contain *any* Python code. However, it contains the Java part of the
pyAntlr code generator plugin (path: antlr/actions/python/**). This code is
written by me, however, nowhere are the words "copyright" or "license"
mentioned. Therefore I conclude, that this code
is fully covered by LICENSE.txt listed in the root of antlr-*.tar.gz (or
other distributions listed at http://www.antlr2.org/download.html).

Thus there is a remaining Python part in "lib/python", part of the source
code distribution (http://www.antlr2.org/download/antlr-2.7.7.tar.gz).
Indeed, the license details are there in a bad shape.

My proposal to get rid of the problem is:

(a) pyANTLR-*.jar   => The pyANTLR code generator plugin for Python written
in Java, depending on antlr-*.jar. Technically, this would be the
"antlr/actions/python/**"
part found in the antlr*.jar file
(b) pyANTLR.zip=>  The pyANTLR Python library. Technically, this would
be the "lib/python/**" part of antlr-*.tar.gz (or other source code
distribution) modified to have a proper license while otherwise unchanged.

You, Debian, you would then ignore (or wipe) the pyANTLR part of the
original antlr-2.* distribution and instead add at least (b) to your
system.

Your comments please.

Kind regards,
Wolfgang Häfelinger


On Fri, Jun 6, 2014 at 10:38 PM, Thorsten Glaser  wrote:

> wolfgang haefelinger dixit:
>
> >Allright, so what is the procedure now to use
> >http://www.gnu.org/copyleft/gpl.html?
>
> ⇒ generic part
>
> As copyright owner, all you have to do is to ensure that
> the people distributing antlr include a LICENSE.txt file
> in the Python subdirectory of their distribution which
> states this fact.
>
> You should also specify which version(s) of the licence.
> For example:
> • GPL version 1 only
> • GPL version 1 or later
> • GPL version 2 only
> • GPL version 2 or later
> • GPL version 3 only
> • GPL version 3 or later
>
> The “only” ones lead to interoperability problems, so
> I suggest an “or later” version, as your software is
> something usually combined with other code, i.e. a
> library of sorts.
>
> Using the GNU GPL will also make (the Python part of)
> antlr incompatible with licences such as the EPL, which
> are unfortunately common in the Java™ world. That being
> said, I do not know why the antlr *.jar file includes
> the Python code, as it does not need to. If the antlr
> upstream distributes the binary *.jar file with it, this
> will not be a problem.
>
> ⇒ Debian part
>
> The Debian package maintainers can add the relevant
> information, and possibly separate the Python part from
> the Java™ part, by themselves, if you notify them of
> this decision of yours (i.e. to use the GPL and which
> versions). For this, replying to the Debian bug eMail
> address is enough.
>
> Of course, Debian would want to stay in sync with
> upstream on this.
>
> ⇒ Upstream part
>
> Please contact the people who develop antlr 2.x and
> notify them of your decision, and ask them to release
> an updated antlr version including the licence file,
> and to prominently state this erratum on their website.
>
> ⇒ Other antlr versions
>
> I’ve only looked at antlr 2.x (since coworkers at the
> dayjob wanted to use this in a project of theirs, and
> since it is in Debian). If antlr 3.x and/or 4.x also
> include your code, please notify the people developing
> those as well.
>
>
> Thanks,
> //mirabilos
> --
> I believe no one can invent an algorithm. One just happens to hit upon it
> when God enlightens him. Or only God invents algorithms, we merely copy
> them.
> If you don't believe in God, just consider God as Nature if you won't deny
> existence.  -- Coywolf Qi Hunt
>



-- 
Wolfgang Häfelinger
häfelinger IT - Applied Software Architecture
http://www.haefelinger.it
+49 1520 32 52 981
(+31 648 27 61 59)
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#751563: tuxguitar: depends on xulrunner which is no more

2014-06-14 Thread gregor herrmann 
On Sat, 14 Jun 2014 12:04:00 +0200, Emilio Pozuelo Monfort wrote:

> Your package depends on:
> xulrunner-29 | xulrunner-24.0 | xulrunner-17.0 | xulrunner-10.0 | 
> xulrunner-1.9.1
> 
> But iceweasel no longer provides a xulrunner binary. Note that the iceweasel 
> binary
> itself ships libxul.so now, so perhaps adding iceweasel (>= 30) as an 
> alternative
> might be enough, if that's what tuxguitar needs.

I've looked into this issue now a bit, and so far I've found:

- misc/tuxguitar.sh (patched 2 times by us) looks for libxpcom.so in
  various mozilla/firefox/iceweasel/xulrunner directories;
- and then sets and exports MOZILLA_FIVE_HOME;
- the last package that contained libxpcom.so was xulrunner-1.9.1;
- so since ages MOZILLA_FIVE_HOME wasn't set anymore;
- for Ubuntu the dependency and this guessing in the wrapper script
  doesn't exist;
- a comment in the script say:
  #/// org.eclipse.swt.SWTError: No more handles
  #/// [Unknown Mozilla path (MOZILLA_FIVE_HOME not set)]

My tentative conclusion is that MOZILLA_FIVE_HOME was needed at some
time in the past, doesn't get set since ages, which doesn't cause any
visible problems.

So it seems like we can just drop this whole xulrunner/iceweasel
machinery from debian/{rules,control} and patch misc/tuxguitar.sh
again to drop it. (And all efforts to update the xulrunner list in
unstable and also stable was probably in vain.)

If for some reason having MOZILLA_FIVE_HOME would be good, we need a
different way to set it. - The web is still full of errors about it,
and the solution seems to be to set it to /usr/lib/iceweasel or
/usr/lib/firefox or /usr/lib/mozilla/.

Maybe someone who knows SWT can shed some light on the question?


Cheers,
gregor

-- 
 .''`.  Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer  -  http://www.debian.org/
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: The Dubliners: Molly Malone


signature.asc
Description: Digital Signature
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#751563: tuxguitar: depends on xulrunner which is no more

2014-06-14 Thread Emilio Pozuelo Monfort 
Source: tuxguitar
Version: 1.2-19
Severity: serious

Your package depends on:
xulrunner-29 | xulrunner-24.0 | xulrunner-17.0 | xulrunner-10.0 | 
xulrunner-1.9.1

But iceweasel no longer provides a xulrunner binary. Note that the iceweasel 
binary
itself ships libxul.so now, so perhaps adding iceweasel (>= 30) as an 
alternative
might be enough, if that's what tuxguitar needs.

Regards,
Emilio

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: your mail

2014-06-14 Thread Debian Bug Tracking System 
Processing commands for cont...@bugs.debian.org:

> reassign 751555 maven2
Bug #751555 [maven-debian-helper] respect http{,s}_proxy env variables
Bug reassigned from package 'maven-debian-helper' to 'maven2'.
No longer marked as found in versions maven-debian-helper/1.6.7.
Ignoring request to alter fixed versions of bug #751555 to the same values 
previously set
>
End of message, stopping processing here.

Please contact me if you need assistance.
-- 
751555: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751555
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#751555: respect http{,s}_proxy env variables

2014-06-14 Thread Yaroslav Halchenko 
Package: maven-debian-helper
Version: 1.6.7
Severity: wishlist
File: /usr/bin/mvn

Those are respected by many environments/libraries/tools in Debian and
handy to force/block network access (e.g. to validate pkg building be
sufficient without network connection).  Maven has its own (XML) means
to configure proxy access and does not care about environment
variables.  I think it would be sensible to support it on on
Debian systems.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (900, 'testing'), (600, 'unstable'), (300, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages maven-debian-helper depends on:
ii  default-jdk 2:1.7-52
ii  libmaven-clean-plugin-java  2.5-1
ii  libmaven-compiler-plugin-java   2.5.1-1
ii  libmaven-jar-plugin-java2.4-1
ii  libmaven-resources-plugin-java  2.3-8
ii  libmaven-site-plugin-java   2.1-2
ii  libplexus-velocity-java 1.1.8-1
ii  libsurefire-java2.10-5
ii  maven-repo-helper   1.8.7
ii  maven2  2.2.1-20
ii  velocity1.7-4

maven-debian-helper recommends no packages.

Versions of packages maven-debian-helper suggests:
ii  apt-file  2.5.2
ii  devscripts2.14.2
pn  libmaven-javadoc-plugin-java  
ii  subversion1.8.9-1

-- no debconf information

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.