Bug#816758: netbeans: Warning during "Turning on modules..." when using openjdk-7

[Kevin Carney]

Package: netbeans
Version: 8.1+dfsg2-1
Severity: normal

Dear Maintainer,

When starting netbeans, the startup splashscreen stops during "Turning on 
modules..." and a warning window is displays:

Window Title: NetBeans IDE - Warning
Text: "org.netbeans.InvalidException: StandardModule:org.netbeans.modules.db 
jarFile: /usr/share/netbeans/8.1/ide/modules/org-netbeans-modules-db.jar: 
java.lang.UnsupportedClassVersionError: org/netbeans/lib/ddl/DBConnection: 
Unsupported major.minor version 52.0"

Warning gives two options: "Exit" and "Disable Modules and Continue"

"Exit" does the obvious thing.

"Disable Modules and Continue" allows the startup process to finish.  
Subsequent startups do not show the warning (presumably because netbeans saves 
the "Disable Modules" option).

This is occuring on a fresh installation of netbeans running on a fresh 
installation of Debian/testing.

It appears to be an issue with openjdk-7, which was pulled in as a dependency 
while installing netbeans.  I subsequently tested by installing openjdk-8, and 
the problem did not occur.

To reproduce:
1. Delete my ~/.netbeans directory,
2. Switched default java to openjdk-7 with: "sudo update-java-alternatives -s 
java-1.7.0-openjdk-amd64"
3. Start netbeans


-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.3.0-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages netbeans depends on:
ii  default-jdk [java7-sdk]  2:1.7-52.1
ii  libnb-apisupport3-java   8.1+dfsg2-1
ii  libnb-ide14-java 8.1+dfsg2-1
ii  libnb-java5-java 8.1+dfsg2-1
ii  libnb-platform18-java8.1+dfsg1-2

netbeans suggests no packages.

-- no debconf information

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#597294: Java 7 is now in multiple digits

[Kevin Elliott]

This has been re-introduced now that Oracle/Sun's JRE and JDK 7.x versions are 
into two digits (the current being 7u11).

The following allowed me to build the package for 7u11.
 
-   jre-7u[0-9]-linux-i586.tar.gz) # SUPPORTED
+   jre-7u[0-9][0-9]-linux-i586.tar.gz) # SUPPORTED

-   jre-7u[0-9]-linux-x64.tar.gz) # SUPPORTED
+   jre-7u[0-9][0-9]-linux-x64.tar.gz) # SUPPORTED



---
Kevin Elliott

Network Specialist
City and Borough of Juneau, MIS
(907) 586 - 0905

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Is sun-java6 6.26-0squeeze1 vulnerable to CVE-2012-1723?

[Kevin]

Sorry if this has been addressed elsewhere. I searched the list and bug reports 
and didn't see anything.

I'm running Squeeze and today Iceweasel informed me that Java Plug-in 1.6.0_26 
is insecure and recommended disabling it.

Versions below 1.6.0_33 or between 1.7.0 and 1.7.0_5 are now in the Mozilla 
blocklist:

https://addons.mozilla.org/en-US/firefox/blocked/p119
https://bugzilla.mozilla.org/show_bug.cgi?id=780717

My question is, is sun-java6 6.26-0squeeze1 vulnerable to CVE-2012-1723? If 
yes, this is a bug against sun-java6 to update the package. If no, I need to 
file a bug against mozilla's blocklist for incorrectly flagging this version as 
insecure.

Thanks,
Kevin

-- 
http://www.fastmail.fm - A no graphics, no pop-ups email service


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Is sun-java6 6.26-0squeeze1 vulnerable to CVE-2012-1723?

[Kevin]

 It is quite possible that sun-java6 is vulnerable to that CVE; I haven't
 checked.  The problem is that we cannot do anything about it as we do
 not have permission to distribute updates for sun-java6[1]...

Thanks for the explanation. I understand this package has been dropped
from testing and unstable. Is there a way other than the Mozilla blocklist 
to inform Squeeze users that they are running an insecure package? Since
I'm running stable and this package is still present in the repository,
I assumed it was still receiving security updates. 

Forgive me if this is a naive question, but should the package be removed 
from stable so users are not unwittingly given a false sense of security?

Thanks,
Kevin

-- 
http://www.fastmail.fm - Send your email first class


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#587657: locally installed plugins aren't loaded

[Kevin Locke]

On Fri, 2010-09-03 at 13:35 +0200, Niels Thykier wrote:
 What version of lucene2 (liblucene2-java) do you have installed?

2.9.2+ds1-1 (Which I don't think has been updated in a while.)  But
the plugin jar from eclipse-platform (3.5.2-6) is
org.apache.lucene_2.9.3.jar.

 Kevin, thanks for the sed command; we may end up using it, though I
 would refer not having to modify the file manually if I can avoid it.
 If/when you experience this again could you please test if running
 
   eclipse -clean
 
 fixes the file? I have heard a loose rumor that parts of upstream would
 like to change the format of the bundles.info.

Sure, I can reproduce the problem by installing/uninstalling any
plugin (the install/uninstall causes the bundles.info file to be
regenerated incorrectly).  Running `eclipse -clean` appears to have no
effect.

I agree, I don't think the sed command would be a good thing to
integrate into the package (too fragile, like you said), just a quick
fix for other affected users.  I would think that the source of the
problem (and the better place to fix it) is whatever generates
bundles.info (and whatever reads it and silently fails hard).

Cheers,
Kevin



__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers. Please 
use
debian-j...@lists.debian.org for discussions and questions.

Bug#587657: locally installed plugins aren't loaded

[Kevin Locke]

On Thu, 2010-09-02 at 20:36 -0600, Kevin Locke wrote:
 sed -ir 's/^([^,]+),[^,]+,([^,]+\/\1)_([^,\/]+).jar,/\1,\3,\2_\3.jar,/' 
 $(find ~/.eclipse -name bundles.info)

One quick followup to my last message.  Here's a corrected command
using BREs instead of EREs so the back-reference is valid.

sed -i 's/^\([^,]*\),[^,]*,\([^,]*\/\1\)_\([^,\/]*\).jar,/\1,\3,\2_\3.jar,/' 
$(find ~/.eclipse -name bundles.info)

Cheers,
Kevin



__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers. Please 
use
debian-j...@lists.debian.org for discussions and questions.

Bug#587657: locally installed plugins aren't loaded

[Kevin Locke]

Just got hit by this bug again.  Jim's suggestion about
org.apache.lucene was right on.  To save time as this bug keeps
reappearing, here's a quick fix for the future:

sed -ir 's/^([^,]+),[^,]+,([^,]+\/\1)_([^,\/]+).jar,/\1,\3,\2_\3.jar,/' $(find 
~/.eclipse -name bundles.info)

Note:  Regex made ugly because _ appears in namespaces and versions
and as a separator between the two... (not POSIX-valid use of sed)

It seems to me that the larger problem here isn't that these versions
are wrong, but that eclipse silently fails to load all plugins when
one version is wrong and doesn't log the error anywhere, making this
bug harder to identify for newly-affected users (or am I overlooking
it somewhere?).

Cheers,
Kevin



__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers. Please 
use
debian-j...@lists.debian.org for discussions and questions.

Bug#357301: eclipse randomly crashes, usually at startup

[Kevin Dalley]

Suggestions on how to make eclipse work under Debian should be
included under /usr/share/doc/eclipse.  This should include suggested
vm, and how to start eclipse with that vm.  Please be very specific.

If eclipse crashes, then the bug should stay open, even if the eclipse
developer can't do anything about.  This is really a serious problem.


___
pkg-java-maintainers mailing list
pkg-java-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers

Bug#337129: java-package: Does not work with IBM Java 5.0 (patch included)

[Kevin Squire]

Barry,

Thanks for allowing the installation of the latest IBM JVMs.  However,
I just installed the IBM Java2 SDK 5.0 on an AMD machine, and the
package name was incorrect--the wrong version (1.4.2) was recognized:

-
[EMAIL PROTECTED]:~/downloads$ make-jpkg ibm-java2-sdk-50-linux-x86_64.tgz
Creating temporary directory: /tmp/make-jpkg.5hW0Wo
Loading plugins: blackdown-j2re.sh blackdown-j2sdk.sh common.sh
ibm-j2re.sh ibm-j2sdk.sh j2re.sh j2sdk-doc.sh j2sdk.sh j2se.sh
sun-j2re.sh sun-j2sdk-doc.sh sun-j2sdk.sh

Detected product:
Java(TM) Software Development Kit (J2SDK)
Standard Edition, Version 1.4.2
IBM Corporation
Is this correct [Y/n]: y

Checking free diskspace: done.

In the next step, the binary file will be extracted. Probably a
license agreement will be displayed. Please read this agreement
carefully. If you do not agree to the displayed license terms, the
package will not be built.

Press [Return] to continue:



Testing extracted archive... okay.

Create debian package:
dh_testdir
dh_testroot
dh_installchangelogs
dh_installdocs
dh_fixperms
dh_installdeb
dh_shlibdeps
dh_gencontrol
dh_md5sums
dh_builddeb
dpkg-deb: building package `ibm-j2sdk1.4' in
`/tmp/make-jpkg.5hW0Wo/ibm-j2sdk1.4_1.4.2_amd64.deb'.
copy ibm-j2sdk1.4_1.4.2_amd64.deb into directory /home/kmsquire/downloads/

The Debian package has been created in the current directory. You can
install the package as root (e.g. dpkg -i ibm-j2sdk1.4_1.4.2_amd64.deb).

---

Thanks,

   Kevin


___
pkg-java-maintainers mailing list
pkg-java-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers