Bug#861545: libwagon2-java: Version upgrade request to 2.12

[Elana Hashman]

Package: libwagon2-java
Version: 2.10-6
Severity: wishlist
Control: block 819811 by -1

To facilitate packaging leiningen2, this package needs an upgrade to 
version 2.12. Phil Hagelberg says this version is needed to fix a bug 
with self-signed certificates.


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: libwagon2-java: Version upgrade request to 2.12

[Debian Bug Tracking System]

Processing control commands:

> block 819811 by -1
Bug #819811 [wnpp] ITP: leiningen -- simple build system for Clojure
819811 was blocked by: 852249 698693 852251 852246 852243 855753 712908 855963 
855712 719664 852248 754504 855709 852244
819811 was blocking: 830904
Added blocking bug(s) of 819811: 861545

-- 
819811: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819811
861545: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861545
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: remove jline dep from leiningen

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> unblock 819811 by 852252
Bug #819811 [wnpp] ITP: leiningen -- simple build system for Clojure
819811 was blocked by: 852248 719664 855753 712908 855709 852249 852251 852243 
855963 698693 852252 754504 852244 855712 852246
819811 was blocking: 830904
Removed blocking bug(s) of 819811: 852252
>
End of message, stopping processing here.

Please contact me if you need assistance.
-- 
819811: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819811
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

robocode_1.9.2.6-1_source.changes ACCEPTED into experimental

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 30 Apr 2017 16:22:47 +0200
Source: robocode
Binary: robocode
Architecture: source
Version: 1.9.2.6-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Markus Koschany 
Description:
 robocode   - Java programming game based on battle tanks
Changes:
 robocode (1.9.2.6-1) experimental; urgency=medium
 .
   * New upstream version 1.9.2.6.
   * Switch to compat level 10.
   * Declare compliance with Debian Policy 3.9.8.
   * Update watch file and track github.com releases from now on.
   * Update copyright years.
   * Drop deprecated menu file and do not create xpm image anymore.
 Remove build-dependency on imagemagick.
   * Refresh ecj.patch.
Checksums-Sha1:
 1cacc1c000671c55bf3d6e042a2d766fce75da37 2343 robocode_1.9.2.6-1.dsc
 0763d54fb8ee0601fc66eecd42c3a4d04fbcb994 1808864 robocode_1.9.2.6.orig.tar.xz
 513c04a80a7346969709ed3cf2459d7f2a56c9e7 12784 robocode_1.9.2.6-1.debian.tar.xz
 207d2fdfdcb45206b38f9c43a3c9475cb049c6fd 14685 
robocode_1.9.2.6-1_amd64.buildinfo
Checksums-Sha256:
 f4f374fbc1d6e64feebce852070395ff4ef8973e31e31dd55ae4ca8531e429cf 2343 
robocode_1.9.2.6-1.dsc
 f48d468a327e93b6d9edadbefb5104eee4516f8ca3ba09b023891e0f088632f7 1808864 
robocode_1.9.2.6.orig.tar.xz
 adc2ddd4a027170d8b848d899dcf2fb64340f5b3109a530ed1c2d9f4eb71cfc0 12784 
robocode_1.9.2.6-1.debian.tar.xz
 6510ad97312179b7a13a0f5d5af8636030879601cf28ee43eb1145f7c3fb9b85 14685 
robocode_1.9.2.6-1_amd64.buildinfo
Files:
 f873637dd8b7da94f38cecb1ea103a40 2343 games optional robocode_1.9.2.6-1.dsc
 d3252add962ae63881bb2ff4bef3bd00 1808864 games optional 
robocode_1.9.2.6.orig.tar.xz
 09f3d32aaceba36b108c0dcc88eeffcd 12784 games optional 
robocode_1.9.2.6-1.debian.tar.xz
 a0e0955906220312c3a36d08fa63a102 14685 games optional 
robocode_1.9.2.6-1_amd64.buildinfo

-BEGIN PGP SIGNATURE-
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=qmKZ
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of robocode_1.9.2.6-1_source.changes

[Debian FTP Masters]

robocode_1.9.2.6-1_source.changes uploaded successfully to localhost
along with the files:
  robocode_1.9.2.6-1.dsc
  robocode_1.9.2.6.orig.tar.xz
  robocode_1.9.2.6-1.debian.tar.xz
  robocode_1.9.2.6-1_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#861521: libxstream-java: CVE-2017-7957

[Emmanuel Bourg]

Thank you Salvatore. Here is the upstream commit that has to be backported:

https://github.com/x-stream/xstream/commit/b3570be

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#856521: libwala-java-doc: uninstallable in sid: unsatisfiable Depends: default-java-doc

[Jeremy Bicha]

I don't know what this package is trying to do, but maybe you meant
for it to depend on default-jdk-doc instead?

Thanks,
Jeremy Bicha

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#861521: libxstream-java: CVE-2017-7957

[Salvatore Bonaccorso]

Source: libxstream-java
Version: 1.4.7-2
Severity: important
Tags: security upstream

Hi,

the following vulnerability was published for libxstream-java.

CVE-2017-7957[0]:
| XStream through 1.4.9, when a certain denyTypes workaround is not used,
| mishandles attempts to create an instance of the primitive type 'void'
| during unmarshalling, leading to a remote application crash, as
| demonstrated by an xstream.fromXML("void/") call.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-7957
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7957
[1] https://x-stream.github.io/CVE-2017-7957.html

Regards,
Salvatore

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.