tika 1.22-1 MIGRATED to testing

2019-08-09 Thread Debian testing watch
FYI: The status of the tika source package in Debian's testing distribution has changed. Previous version: 1.21-1 Current version: 1.22-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive

visualvm 1.4.3-1 MIGRATED to testing

2019-08-09 Thread Debian testing watch
FYI: The status of the visualvm source package in Debian's testing distribution has changed. Previous version: 1.4.2-2 Current version: 1.4.3-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

pantomime-clojure is marked for autoremoval from testing

2019-08-09 Thread Debian testing autoremoval watch
pantomime-clojure 2.1.0+dfsg-1 is marked for autoremoval from testing on 2019-09-15 It (build-)depends on packages with these RC bugs: 933744: tika: CVE-2019-10088: OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper 933746: tika: CVE-2019-10094: tackOverflow from Crafted

tika is marked for autoremoval from testing

2019-08-09 Thread Debian testing autoremoval watch
tika 1.21-1 is marked for autoremoval from testing on 2019-09-15 It is affected by these RC bugs: 933744: tika: CVE-2019-10088: OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper 933746: tika: CVE-2019-10094: tackOverflow from Crafted Package/Compressed Files in Apache Tika's

gradle 4.4.1-8 MIGRATED to testing

2019-08-09 Thread Debian testing watch
FYI: The status of the gradle source package in Debian's testing distribution has changed. Previous version: 4.4.1-7 Current version: 4.4.1-8 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive

vorbis-java is marked for autoremoval from testing

2019-08-09 Thread Debian testing autoremoval watch
vorbis-java 0.8-3 is marked for autoremoval from testing on 2019-09-15 It (build-)depends on packages with these RC bugs: 933744: tika: CVE-2019-10088: OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper 933746: tika: CVE-2019-10094: tackOverflow from Crafted Package/Compressed

Processed: found 934319 in 1.8.2-2, found 934319 in 1.7.2-2

2019-08-09 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 934319 1.8.2-2 Bug #934319 {Done: Emmanuel Bourg } [src:icedtea-web] CVE-2019-10181 CVE-2019-10182 CVE-2019-10185 Marked as found in versions icedtea-web/1.8.2-2. > found 934319 1.7.2-2 Bug #934319 {Done: Emmanuel Bourg } [src:icedtea-web]

Processed: tagging 934319

2019-08-09 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 934319 + upstream Bug #934319 {Done: Emmanuel Bourg } [src:icedtea-web] CVE-2019-10181 CVE-2019-10182 CVE-2019-10185 Added tag(s) upstream. > thanks Stopping processing here. Please contact me if you need assistance. -- 934319:

Bug#934319: marked as done (CVE-2019-10181 CVE-2019-10182 CVE-2019-10185)

2019-08-09 Thread Debian Bug Tracking System
Your message dated Fri, 09 Aug 2019 17:19:28 + with message-id and subject line Bug#934319: fixed in icedtea-web 1.8.3-1 has caused the Debian Bug report #934319, regarding CVE-2019-10181 CVE-2019-10182 CVE-2019-10185 to be marked as done. This means that you claim that the problem has been

icedtea-web_1.8.3-1_source.changes ACCEPTED into unstable

2019-08-09 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 09 Aug 2019 18:57:41 +0200 Source: icedtea-web Architecture: source Version: 1.8.3-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers Changed-By: Emmanuel Bourg Closes: 934319 Changes:

Processing of icedtea-web_1.8.3-1_source.changes

2019-08-09 Thread Debian FTP Masters
icedtea-web_1.8.3-1_source.changes uploaded successfully to localhost along with the files: icedtea-web_1.8.3-1.dsc icedtea-web_1.8.3.orig.tar.xz icedtea-web_1.8.3-1.debian.tar.xz icedtea-web_1.8.3-1_source.buildinfo Greetings, Your Debian queue daemon (running on host

Processed: Bug#934319 marked as pending in icedtea-web

2019-08-09 Thread Debian Bug Tracking System
Processing control commands: > tag -1 pending Bug #934319 [src:icedtea-web] CVE-2019-10181 CVE-2019-10182 CVE-2019-10185 Added tag(s) pending. -- 934319: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934319 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems __ This is

Bug#933676: openjdk-11-jre-dcevm: openjdk-11-jre-dvecm doesn't include the hotswap agent

2019-08-09 Thread Michael Meier
No idea how to change this report into a RFP, so I just created a new one (which took me long enough to find out how to): Bug#934318 So I guess you can close that one here :-). thanks Michael On 01.08.19 14:53, Emmanuel Bourg wrote: Le 01/08/2019 à 20:21, Michael Meier a écrit : according

Bug#934319: CVE-2019-10181 CVE-2019-10182 CVE-2019-10185

2019-08-09 Thread Moritz Muehlenhoff
Source: icedtea-web Severity: grave Tags: security Please see https://www.openwall.com/lists/oss-security/2019/07/31/2 Cheers, Moritz __ This is the maintainer address of Debian's Java team . Please use

Bug#934032: libjaxen-java: FTBFS in stretch (failing tests, IllegalArgumentException)

2019-08-09 Thread Emmanuel Bourg
Le 09/08/2019 à 11:06, Santiago Vila a écrit : > Point releases exist to fix bugs like this one, so I don't see why I > would have to stop reporting them. If you do so, please amend the existing bugs instead of opening new ones (in this case #909216 should have been unarchived and modified to

Processed: your mail

2019-08-09 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > unarchive 909216 Bug #909216 {Done: Emmanuel Bourg } [src:libjaxen-java] libjaxen-java FTBFS: java.lang.IllegalArgumentException: Illegal character in local name: 'pre:foo' Unarchived Bug 909216 > found 909216 1.1.6-1 Bug #909216 {Done:

Bug#934032: libjaxen-java: FTBFS in stretch (failing tests, IllegalArgumentException)

2019-08-09 Thread Santiago Vila
On Thu, Aug 08, 2019 at 09:43:53AM +0200, Emmanuel Bourg wrote: > If a build issue appeared *after* the release, due to a regression > caused by a point release, then yes I think the issue is worth reporting > (but I wouldn't bother reporting minor test failures that can be easily > skipped to