Your message dated Thu, 29 Oct 2015 17:49:04 +0000
with message-id <e1zrrjw-00050d...@franck.debian.org>
and subject line Bug#801001: fixed in jftp 1.52+dfsg-4
has caused the Debian Bug report #801001,
regarding jftp: depends on obsolete libcommons-httpclient-java library
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
801001: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=801001
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: jftp
Severity: normal
User: pkg-java-maintainers@lists.alioth.debian.org
Usertags: oldlibs libcommons-httpclient-java

Hi,

jftp depends on libcommons-httpclient-java, which is obsolete and was
replaced by libhttpclient-java. It has reached EOL status in 2011! It is no
longer supported upstream [1] and was affected by multiple security issues in
the recent past. jftp should be ported to the new libhttpclient-java
version, so that we can remove the old, unmaintained one. Please forward this
issue upstream, if you can't migrate the package yourself.

We would like to see libcommons-httpclient-java removed during the Stretch
release cycle but due to the large number of reverse-dependencies the outcome
depends more than ever on your help.

Please help us to accomplish this goal. We will bump this issue to important
when the list of rdeps is getting smaller and we think that the removal is
possible. We will eventually raise the severity to serious when the number
of rdeps is small.

If you have any questions don't hesitate to ask and contact us on

debian-j...@list.debian.org

Regards,

Markus

[1] https://hc.apache.org/httpclient-3.x/

[2] 
https://security-tracker.debian.org/tracker/source-package/commons-httpclient

--- End Message ---
--- Begin Message ---
Source: jftp
Source-Version: 1.52+dfsg-4

We believe that the bug you reported is fixed in the latest version of
jftp, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 801...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany <a...@debian.org> (supplier of updated jftp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 29 Oct 2015 18:08:57 +0100
Source: jftp
Binary: jftp
Architecture: source
Version: 1.52+dfsg-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Java maintainers 
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <a...@debian.org>
Description:
 jftp       - Java GUI client for FTP, SMB, SFTP and NFS
Closes: 770570 801001
Changes:
 jftp (1.52+dfsg-4) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Kumar Appaiah ]
   * Remove myself from Uploaders.
 .
   [ Markus Koschany ]
   * Remove Niels Thykier from Uploaders at his own request. (Closes: #770570)
   * Remove libcommons-httpclient-java from Build-Depends and Depends.
     Apparently no code at all depends on it anymore. (Closes: #801001)
   * Vcs-Browser: Use https.
   * Declare compliance with Debian Policy 3.9.6.
   * Add keywords to desktop file.
Checksums-Sha1:
 c42022b96b825d82da61b45e1f59720eba8a0c8e 2187 jftp_1.52+dfsg-4.dsc
 f3119259f8a83225ea66820e841a506fe693f4e3 16004 jftp_1.52+dfsg-4.debian.tar.xz
Checksums-Sha256:
 7559d6c4100a1ce9c97fc6e4cd658920aab5d66f46395395daafee44b8490c5c 2187 
jftp_1.52+dfsg-4.dsc
 7ac2e5a46b6596780363cedfb3c0c5e275e1e89e79dd0360df5bc7c991029583 16004 
jftp_1.52+dfsg-4.debian.tar.xz
Files:
 4a4834dfcf1cddccea9db273ecf7a524 2187 net optional jftp_1.52+dfsg-4.dsc
 35bb49e344b6fc8d325008c1ce6a9814 16004 net optional 
jftp_1.52+dfsg-4.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=ik8Y
-----END PGP SIGNATURE-----

--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to