Bug#923748: marked as done (javahelper: javadoc: error - The code being documented uses packages in the unnamed module)

2019-03-10 Thread Markus Koschany
Control: reopen -1 Hello Andrej, bug 923748 is about a different issue and unrelated to your recent upload. We need to fix it too and I proposed a patch here: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923756#30 Markus signature.asc Description: OpenPGP digital signature __ This is

Bug#924256: openjpeg2: FTBFS: Can't exec "jh_build": No such file or directory at /usr/bin/dh line 908.

2019-03-10 Thread Markus Koschany
Control: retitle -1 javahelper: javadoc: error - The code being documented uses packages in the unnamed module Hi, Am 10.03.19 um 18:15 schrieb Andreas Metzler: > Control: reassign -1 javahelper 0.72.3 > Control: forcemerge 923748 924256 > Control: retitle -1 shebang line in jh_build

Bug#875358: Powermock RC #875358

2019-03-09 Thread Markus Koschany
Am 09.03.19 um 18:55 schrieb Adam D. Barratt: > On Fri, 2019-03-01 at 23:34 +0100, Markus Koschany wrote: >> I have removed powermock from all reverse-dependencies. This bug >> should no longer be a blocker for Buster and powermock can be safely >> removed from testing. >

Bug#919638: solr-tomcat: Permission problems after update to tomcat9

2019-03-03 Thread Markus Koschany
Control: severity -1 serious Control: reassign -1 solr-tomcat Am 01.03.19 um 19:58 schrieb Emmanuel Bourg: > Le 01/03/2019 à 18:29, Markus Koschany a écrit : > >> I have never extended security permissions of >> another systemd service. How is this supposed to work?

Bug#923364: FTBS: Can't build against bouncy-castle build with newer jdk

2019-03-02 Thread Markus Koschany
Control: tags -1 moreinfo On Tue, 26 Feb 2019 23:07:43 +0100 Sjoerd Simons wrote: > Package: libitext-java > Version: 2.1.7-12 > Severity: serious > Tags: patch > > Hey, > > When rebuilding bouncy-castle the jar doesn't seem to have the same classpath Hello, I guess you meant libitext-java?

Bug#875358: Powermock RC #875358

2019-03-01 Thread Markus Koschany
I have removed powermock from all reverse-dependencies. This bug should no longer be a blocker for Buster and powermock can be safely removed from testing. signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team

Bug#919638: solr-tomcat: Permission problems after update to tomcat9

2019-03-01 Thread Markus Koschany
Am 01.03.19 um 18:24 schrieb Emmanuel Bourg: > Le 01/03/2019 à 18:19, Markus Koschany a écrit : > >> I think just creating /var/lib/solr with tomcat9.dirs is sufficient. I >> tested both cases, installing tomcat9 first and then solr-tomcat and >> vice versa, and t

Bug#919638: solr-tomcat: Permission problems after update to tomcat9

2019-03-01 Thread Markus Koschany
Hi, I think just creating /var/lib/solr with tomcat9.dirs is sufficient. I tested both cases, installing tomcat9 first and then solr-tomcat and vice versa, and the server always started correctly. SystemD just requires an existing directory. Do you agree with this change?

Bug#923455: FTBS on 32 bit architectures

2019-02-28 Thread Markus Koschany
Am 28.02.19 um 13:48 schrieb Sjoerd Simons: [...] > I can drop some into salsa and do an MR if you prefer; I don't really > want to join the java team though, I mostly hope to be able to forget > about all these java pains asap :) You discovered all those bugs during the freeze, of course you

Bug#923455: FTBS on 32 bit architectures

2019-02-28 Thread Markus Koschany
Hi Sjoerd, Am 28.02.19 um 13:38 schrieb Sjoerd Simons: > Source: netty > Version: 4.1.33-1 > Severity: important > Tags: ftbfs > Justification: fails to build from source > > Hey, > > It seems that netty fails to build on 32 bit architectures, we hit that in our > rebuild on 32 bit as does the

Bug#923330: jajuk: Fails to start with Java Runtime Environment 1.7 minimum required. You use a JVM ext.JVM@23fc625e

2019-02-26 Thread Markus Koschany
Am 26.02.19 um 21:34 schrieb Markus Koschany: > Thanks for reporting and the hint how to fix this problem. I'll take a > closer look soon. Unfortunately there is another issue that prevents jajuk from starting. This appears to be the same one which affects triplea as well.

Bug#923330: jajuk: Fails to start with Java Runtime Environment 1.7 minimum required. You use a JVM ext.JVM@23fc625e

2019-02-26 Thread Markus Koschany
Control: severity -1 grave Hello Bertrand, hello Werner Am 26.02.19 um 21:13 schrieb Bertrand Florat: > Hi, > > Current develop branch fixes that : > https://github.com/jajuk-team/jajuk/blob/develop/src/main/java/org/jajuk/Main.java > > We now just throw an error if JVM is < 1.8. > [...] >

Bug#917702: jruby FTBFS with openjdk-9

2019-02-26 Thread Markus Koschany
Hi, Am 25.02.19 um 19:40 schrieb Miguel Landaeta: > Hi Markus, > > On Sun, Feb 24, 2019 at 08:39:48PM +0100, Markus Koschany wrote: >> JRuby is a mess. I guess we "just" need to package the latest upstream >> release to fix the FTBFS bugs. Nobody felt like doing th

Bug#919638: solr-tomcat: Permission problems after update to tomcat9

2019-02-26 Thread Markus Koschany
Am 26.02.19 um 09:46 schrieb Emmanuel Bourg: > Control: reopen -1 > Control: notfixed -1 9.0.16-2 > > Le 17/02/2019 à 12:38, Markus Koschany a écrit : > >> Thank you for the confirmation. Then I think reassigning this issue to >> src:tomcat9 and fixing it there is s

Bug#893244: jruby FTBFS with openjdk-9

2019-02-24 Thread Markus Koschany
JRuby is a mess. I guess we "just" need to package the latest upstream release to fix the FTBFS bugs. Nobody felt like doing that in the past twelve months, so I think it is unrealistic to believe we can make it happen within one week. Of course if the release team can be convinced to accept a new

Bug#887140: libjogl2-java FTBFS on architectures that use zero (timeout)

2019-02-24 Thread Markus Koschany
libjogl2-java still FTBFS on armel, mips64el and mipsel. I don't know why the build process requires so much time on these platforms excluding mips64el which never built before. On mips the build succeeded after six hours. I don't believe that mips and arm architectures are really supported by

Bug#875358: Powermock RC #875358

2019-02-21 Thread Markus Koschany
Hi, powermock has been failing to build from source since we introduced OpenJDK 9 to Debian. It has not been removed yet because several packages build-depend on it. reverse-depends -b libpowermock-java Reverse-Build-Depends-Indep === * jline2 Reverse-Build-Depends

Bug#922755: groovy: FTBFS on Buster

2019-02-20 Thread Markus Koschany
Control: tags -1 pending Am 20.02.19 um 11:45 schrieb Ritesh Raj Sarraf: > Source: groovy > Severity: serious > Tags: ftbfs > Justification: fails to build from source > > Dear Maintainer, > > The package fails to build on Buster/Sid. The relevant build failure > snippet is below and full build

Bug#922242: lucene-solr: CVE-2017-3164

2019-02-19 Thread Markus Koschany
Am 19.02.19 um 17:40 schrieb Moritz Mühlenhoff: > On Fri, Feb 15, 2019 at 11:21:13AM +0100, Markus Koschany wrote: [...] >> >> Upstream solved this problem by adding a new whitelist option for nodes >> and shards and what they can request. In the latest version Zookeepe

Bug#875358: Fails with Java 9, >2.0.0 required to work

2019-02-19 Thread Markus Koschany
On Sun, 10 Sep 2017 21:41:52 +0100 Chris West wrote: > Source: powermock > Version: 1.6.6 > Severity: normal > User: debian-j...@lists.debian.org > Usertags: default-java9 > > Powermock fails to work properly on Java 9. Powermock still fails to build but has not been removed from testing yet

Bug#903125: exec-maven-plugin: FTBFS in stretch (expected:<[mvn] --version> but was:<['mvn'] --version>)

2019-02-19 Thread Markus Koschany
Control: severity -1 important On Fri, 06 Jul 2018 13:25:28 + Santiago Vila wrote: > Package: src:exec-maven-plugin > Version: 1.1.1+dfsg-3 > Severity: serious > Tags: ftbfs Buster/Sid is not affected. Since there is also a simple workaround for stable and oldstable (disabling the tests), I

Bug#919917: yui-compressor: insufficient java dependency in jessie

2019-02-17 Thread Markus Koschany
Contol: severity -1 normal On Mon, 21 Jan 2019 20:13:37 -0800 tony mancill wrote: > On Sun, Jan 20, 2019 at 06:14:31PM +0100, Andreas Beckmann wrote: > > Package: yui-compressor > > Version: 2.4.7-2 > > Severity: serious > > Tags: jessie > > User: debian...@lists.debian.org > > Usertags:

Bug#919638: solr-tomcat: Permission problems after update to tomcat9

2019-02-17 Thread Markus Koschany
Control: reassign -1 src:tomcat9 Am 17.02.19 um 06:58 schrieb Michael Welsh Duggan: [...] > Based on your prior tip, I had already done that. (Only the > /var/lib/solr/ entry seemed to be necessary.) This caused things to > work again. Thank you for the confirmation. Then I think reassigning

Bug#922242: lucene-solr: CVE-2017-3164

2019-02-15 Thread Markus Koschany
On Wed, 13 Feb 2019 17:43:43 +0100 Salvatore Bonaccorso wrote: > Source: lucene-solr > Version: 3.6.2+dfsg-16 > Severity: important > Tags: security upstream > Forwarded: https://issues.apache.org/jira/browse/SOLR-12770 > Control: found -1 3.6.2+dfsg-10+deb9u2 > Control: found -1 3.6.2+dfsg-10 >

Bug#919638: solr-tomcat: Permission problems after update to tomcat9

2019-02-15 Thread Markus Koschany
Hello Michael, On Fri, 18 Jan 2019 01:19:36 -0500 Michael Welsh Duggan wrote: > Package: solr-tomcat > Version: 3.6.2+dfsg-16 > Severity: important > > Dear Maintainer, > > After updating tomcat to tomcat9 and solr-tomcat to 3.6.2+dfsg-16, it > seems to be having problems writing to its index

Bug#914223: solr-jetty: doesn't remove records from statoverride after purge

2019-02-15 Thread Markus Koschany
Control: tags -1 pending On Tue, 20 Nov 2018 21:11:14 +0300 sergio wrote: > Package: solr-jetty > Version: 3.6.2+dfsg-10+deb9u2 > Severity: serious > Justification: Policy 10.9 > > solr-jetty was installed and purged from host. I'm not able to > dist-upgrade more: > > dpkg: unrecoverable fatal

Bug#917739: lucene-solr: FTBFS: [exec] Execute failed: java.io.IOException: Cannot run program "svnversion" (in directory "/<>/lucene-solr-3.6.2+dfsg/solr/contrib/dataimporthandler"): error=

2019-02-14 Thread Markus Koschany
On Sat, 29 Dec 2018 23:26:49 +0100 Lucas Nussbaum wrote: > Source: lucene-solr > Version: 3.6.2+dfsg-16 > Severity: serious > Justification: FTBFS on amd64 > Tags: buster sid > Usertags: ftbfs-20181229 ftbfs-buster > > Hi, > > During a rebuild of all packages in sid, your package failed to

Bug#922190: Fwd: Bug#922190: netbeans: Illegal reflective access by org.netbeans.core.windows.view.ui.MainWindow

2019-02-14 Thread Markus Koschany
Hi Gustavo, Am 13.02.19 um 23:23 schrieb Gustavo Castro: [...] > java.lang.SecurityException: sealing violation >     at org.netbeans.JarClassLoader.doLoadClass(Unknown Source) >     at org.netbeans.ProxyClassLoader.selfLoadClass(Unknown Source) >     at

Bug#922190: netbeans: Illegal reflective access by org.netbeans.core.windows.view.ui.MainWindow

2019-02-13 Thread Markus Koschany
Hi, Am 13.02.19 um 02:45 schrieb Gustavo Castro: > Package: netbeans > Version: 10.0-2 > Severity: normal > > Dear Maintainer, > > netbeans has a failure at the beginning > > WARNING: An illegal reflective access operation has occurred > WARNING: Illegal reflective access by >

Bug#897945: [Openjdk] Bug#920037: Bug#897945: #897945 still present/breaks with Java 8

2019-02-04 Thread Markus Koschany
Am 04.02.19 um 14:56 schrieb Per Lundberg: > On 2/1/19 11:20 AM, Matthias Klose wrote: >> On 01.02.19 10:03, Emmanuel Bourg wrote: > >>> This is an excellent suggestion. We should file a bug for openjdk-8 to >>> implement that. >> please attach the patch. > > Sure, I should be able to write

Bug#919803: Bug#919802: libjstun-java: FTBFS (The code being documented uses packages in the unnamed module)

2019-01-29 Thread Markus Koschany
Am 29.01.19 um 23:09 schrieb Santiago Vila: > On Tue, Jan 29, 2019 at 11:00:25PM +0100, Gilles Filippini wrote: > >> No, this is a misunderstanding: the code snippet above scans >> Build-Depends* fields from debian/control. If default-jdk-doc is >> installed but not referenced in Build-Depends*,

Bug#897945: #897945 still present/breaks with Java 8

2019-01-29 Thread Markus Koschany
Am 29.01.19 um 14:19 schrieb Per Lundberg: > Hi Markus, > > On 1/29/19 1:32 PM, Markus Koschany wrote: >> >>> I am sorry but OpenJDK 8 will not be supported at runtime in >>> Buster. > Another question: if this is the case, should the openjdk-8-jdk package &

Bug#897945: #897945 still present/breaks with Java 8

2019-01-29 Thread Markus Koschany
Am 29.01.19 um 13:54 schrieb Per Lundberg: [...] > But, the approach you suggest is fine. Markus, will you reopen this bug > or should we file a new one about it, what do you prefer? I think we don't need a new bug report for that. I will change that later today. Regards, Markus

Bug#897945: #897945 still present/breaks with Java 8

2019-01-29 Thread Markus Koschany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 29.01.19 um 12:06 schrieb Markus Koschany: > I am sorry but OpenJDK 8 will not be supported at runtime in > Buster. If it works with OpenJDK 11, which it does, then we should > spend the remaining time before the release on more urge

Bug#897945: #897945 still present/breaks with Java 8

2019-01-29 Thread Markus Koschany
Am 29.01.19 um 10:58 schrieb Emmanuel Bourg: > Le 29/01/2019 à 10:40, Per Lundberg a écrit : >> FWIW, version 1.4.2-1 works correctly with openjdk-11-jdk version >> 11.0.2+7-1, but it _does not_ work correct any more with Java 8 >> (openjdk-8-jdk version 8u191-b12-2) > > Thank you for the

Bug#912187: ca-certificates-java: Wrong jvm options for armhf

2019-01-28 Thread Markus Koschany
On Sun, 28 Oct 2018 22:53:56 +0100 =?UTF-8?Q?Gero_M=c3=bcller?= wrote: > Package: ca-certificates-java > Version: 20170531+nmu1 > > On armhf the server JVM is not available. But the postinst script > assumes so and uses it to setup a temporary configuration in > /etc/java-8-openjdk/jvm-armhf.cfg

Bug#864657: ca-certificates-java: Can we have fix for this in Stretch as well, please.

2019-01-28 Thread Markus Koschany
On Wed, 23 Jan 2019 21:27:09 +0100 Markus Koschany wrote: > Of course I meant default-jre-headless | java7-runtime-headless. If nobody objects, I will implement this change tomorrow. signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java t

Bug#920707: netbeans: Unexpected Exception sealing violation related to nb-javac

2019-01-28 Thread Markus Koschany
Source: netbeans Version: 10.0-2 Severity: normal The nb-javac module was not initially detected. It turned out that I had to modify the MANIFEST file in org-netbeans-libs-javacimpl.jar and org-netbeans-libs-javacapi.jar to point to the system jar file of nb-javac-9-api-jar and

Bug#920706: netbeans: does not support Git with system libraries anymore

2019-01-28 Thread Markus Koschany
Package: libnb-ide14-java Version: 10.0-2 Severity: normal Unfortunately Netbeans 10.0 does not support Git out-of-the-box anymore. This used to work with version 8.1. The reason is that several modules cannot be actived (installed in Netbeans terms) at startup, among others libs.jgit and jsch

Bug#891957: netbeans no starting "loading module" modules.netbinox NullPointerException

2019-01-25 Thread Markus Koschany
Control: reassign -1 libequinox-osgi-java Control: found -1 3.9.1-1 This issue is actually caused by missing files in libequionx-osgi-java. The sources from Maven did neither contain the *.profile nor .properties files which caused a NullPointerException in Netbeans and made the program unusable.

Bug#864657: ca-certificates-java: Can we have fix for this in Stretch as well, please.

2019-01-23 Thread Markus Koschany
Of course I meant default-jre-headless | java7-runtime-headless. signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team . Please use debian-j...@lists.debian.org

Bug#864657: ca-certificates-java: Can we have fix for this in Stretch as well, please.

2019-01-23 Thread Markus Koschany
On Wed, 23 Jan 2019 19:08:27 + Marcin Kulisz wrote: > Package: ca-certificates-java > Followup-For: Bug #864657 > > Hi I just want to add that at the moment Stretch current stable has this > broken > to the point that neither openjdk nor ca-certificates-java packages can be > installed

Bug#842284: visualvm: performs update check/phones home

2019-01-23 Thread Markus Koschany
Control: reassign -1 libnb-platform18-java On Thu, 27 Oct 2016 12:23:11 -0400 "Roberto C. Sanchez" wrote: > Package: visualvm > Version: 1.3.8-1 > Severity: normal > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > When launched, the visualvm package phones home to perform an update >

Bug#918705: URL parsing fails with NoSuchMethodError on Java 8

2019-01-08 Thread Markus Koschany
Am 08.01.19 um 14:25 schrieb Timo Kalliomäki: > Package: libhttpclient-java > Version: 4.5.6-1 > Severity: important > > Dear Maintainer, > > The parsing functionality under URLEncodedUtils fails when running under Java > 8. > This seems to be due to the return type of

Bug#800993: fixed in jackrabbit 2.18.0-1

2019-01-08 Thread Markus Koschany
Control: reopen -1 The removal of commons-httpclient has to be postponed for a while. See also #917174 for further information. __ This is the maintainer address of Debian's Java team . Please use

Bug#912631: liblwjgl-java-jni: Missing symbols in liblwjgl.so, stretch-sid, 386, amd64, mips

2019-01-02 Thread Markus Koschany
Control: tags -1 pending Am 31.12.18 um 06:13 schrieb Le Gall Guillaume: > Hello, > > > and thank you very much for your answer. > > > First, about OpenJDK 11, and "debian/patches/javah.patch". You are > absolutely right to point that out. Actually, I had missed that the > "javah" tool was

Bug#917819: jameica: MySQL not usable #2

2018-12-30 Thread Markus Koschany
Control: tags -1 patch Control: reassign -1 hibiscus Hi, Am 30.12.18 um 18:33 schrieb Christian Weiske: > Package: jameica > Version: 2.8.2+dfsg-6 > Severity: normal > > Dear Maintainer, > > I would like to use Jameica/Hibiscus with my MySQL server because I have a > central > hibiscusserver

Bug#912631: liblwjgl-java-jni: Missing symbols in liblwjgl.so, stretch-sid, 386, amd64, mips

2018-12-28 Thread Markus Koschany
Control: severity -1 grave Hello, first of all both of you, thank you very much for the report and investigation and sorry for the late response. Unfortunately we can't remove the javah.patch because we have to use OpenJDK 11 to build lwjgl. But we have to improve it if we want to compile the

Bug#912231: bnd FTBFS with OpenJDK 11

2018-12-20 Thread Markus Koschany
Hi, Am 19.12.18 um 22:32 schrieb Emmanuel Bourg: > Le 29/10/2018 à 23:32, Markus Koschany a écrit : >> The OpenJDK 11 issue is rather simple to fix, however the build fails >> later on with this error message, a Gradle issue? > > I've figured out what is causing the s

Bug#910764: openjfx: segmentation fault in GtkNativeMainLoopThread

2018-11-30 Thread Markus Koschany
Am 30.11.18 um 18:21 schrieb Hans Georg Colle: > Hello Markus, > could you run your application using xorg instead of the xwayland > server (i. e. choose "Gnome unter Xorg" in the gdm3 greeter settings > before logging in), please, and report the result? > I got the same issue running a JavaFX-UI

Bug#914748: ant: Fail when installed along with usrmerge and invoked via /bin/ant

2018-11-26 Thread Markus Koschany
Hi, Am 26.11.18 um 22:46 schrieb Gilles Filippini: > Package: ant > Version: 1.9.10-1 > Severity: serious > Tags: patch > Justification: Causes FTBFS > > Hi, > > When installed along with usrmerge, ant can be invoked via /bin/ant. In this > case it fails with: [...] Just some quick notes,

Bug#914417: libjide-oss-java package does not install a jide-oss.jar file when built from source

2018-11-23 Thread Markus Koschany
Control: reassign -1 src:javahelper Am 23.11.18 um 09:48 schrieb Matthias Klose: > Package: src:libjide-oss-java > Version: 3.7.4+dfsg-1 > Severity: serious > Tags: sid buster > > Seen at > https://bugs.launchpad.net/ubuntu/+source/starjava-ttools/+bug/1804773 > > verified that a rebuild in

Bug#914291: jaxrs-api: copyright file wrong

2018-11-21 Thread Markus Koschany
Am 21.11.18 um 19:57 schrieb Thorsten Glaser: > Hi Emmanuel, > >> 2.1 under the CDDL+GPL and the version 2.1.1 under the EPL+GPL. So it's >> still correct to state that the code is licensed under the CDDL. > > the code, perhaps, but not the source package you received. > > Why don’t you just

Bug#914291: jaxrs-api: copyright file wrong

2018-11-21 Thread Markus Koschany
Am 21.11.18 um 19:30 schrieb Thorsten Glaser: [...] > This is wrong, see the NOTICE file: > > | ## Declared Project Licenses > | > | This program and the accompanying materials are made available under the > terms > | of the Eclipse Public License v. 2.0 which is available at > |

Bug#914291: jaxrs-api: copyright file wrong

2018-11-21 Thread Markus Koschany
Control: severity -1 normal Am 21.11.18 um 18:15 schrieb Thorsten Glaser: > Source: jaxrs-api > Version: 2.1.2-2 > Severity: serious > Justification: Policy 2.3, 12.5, possibly 2.1 > > In an internal Java™ project of $dayjob I was checking licences > of updated components and found that

Bug#914105: dh_install: Cannot find (any matches for) "pdfbox/target/apidocs/*" (tried in ., debian/tmp)

2018-11-19 Thread Markus Koschany
Am 19.11.18 um 16:30 schrieb Mathieu Malaterre: > On Mon, Nov 19, 2018 at 4:15 PM Markus Koschany wrote: >> Are you sure you are trying to build src:libpdfbox-java and not >> src:libpdfbox2-java? > > Sorry my fault. Fixed now. > >> In any case both packages build f

Bug#914105: dh_install: Cannot find (any matches for) "pdfbox/target/apidocs/*" (tried in ., debian/tmp)

2018-11-19 Thread Markus Koschany
Am 19.11.18 um 15:19 schrieb Mathieu Malaterre: > Source: libpdfbox-java > Version: 1:1.8.16-1 > > For some reason I cannot build libpdfbox-java locally, it fails to build with: > > Offline mode. Give up looking for package containing > /usr/share/doc/libbcprov-java/apidocs/index.html >> dpkg

Bug#912916: mysql-connector-java: CVE-2018-3258: allows low privileged attacker to compromise it

2018-11-09 Thread Markus Koschany
Control: retitle -1 mysql-connector-java: removal from Debian Control: block -1 by 913323 913354 913360 913343 913362 So here we go. The removal of mysql-connector-java is currently blocked by five bugs. I have submitted patches for four of them and I will take care of netbeans myself. I'm

Bug#913362: netbeans: please switch to libmariadb-java

2018-11-09 Thread Markus Koschany
Package: libnb-ide14-java Version: 8.1+dfsg3-5 Severity: important Hello, we would like to remove libmysql-java from Debian because it is frequently affected by security vulnerabilities which are not fully disclosed. This makes it hard to determine the impact of such a flaw.[1] However we also

Bug#912916: mysql-connector-java: CVE-2018-3258: allows low privileged attacker to compromise it

2018-11-08 Thread Markus Koschany
Am 08.11.18 um 19:34 schrieb Moritz Mühlenhoff: [...] > So upon a closer look this seems to only affect the 8.x releases of the > connector (Oracle only lists those affected release series which are > affected and this only lists 8.x, while 5.1.x is still supported; there's > a 5.1.47 release). >

Bug#912916: mysql-connector-java: CVE-2018-3258: allows low privileged attacker to compromise it

2018-11-05 Thread Markus Koschany
Am 05.11.18 um 14:13 schrieb Moritz Mühlenhoff: [...] > The Java connector follows the horrible Oracle policy of not disclosing > vulnerability information. Given that we now have mariadb-connector-java > in the archive (with a transparent upstream), can we migrate existing > reverse deps

Bug#912916: mysql-connector-java: CVE-2018-3258: allows low privileged attacker to compromise it

2018-11-04 Thread Markus Koschany
Package: mysql-connector-java X-Debbugs-CC: t...@security.debian.org Severity: grave Tags: security Hi, The following vulnerability was published for mysql-connector-java. CVE-2018-3258[0]: | Vulnerability in the MySQL Connectors component of Oracle MySQL | (subcomponent: Connector/J).

Bug#911194: libbtm-java: FTBFS with Java 11 due to javax.rmi removal

2018-11-03 Thread Markus Koschany
libbtm-java looks like a removal candidate for me. Last release was in 2012, project looks pretty much stalled. https://github.com/bitronix/btm The only r-dep is ehcache which uses libbtm-java for its tests. signature.asc Description: OpenPGP digital signature __ This is the maintainer

Bug#912751: jh_installjavadoc: produces incorrect doc-base file

2018-11-03 Thread Markus Koschany
Package: javahelper Version: 0.70 Severity: important I discovered a regression in jh_installjavadoc. This tool will automatically create a doc-base file. In libjackson-json-java 1.9.2-9 the content looks as follows: Format: HTML Index: //usr/share/doc/libjackson-json-java/api Files:

Bug#910764: Forward 910764 OpenJFX 11 segmentation fault

2018-10-31 Thread Markus Koschany
Control: severity -1 important On Tue, 30 Oct 2018 14:39:11 +0100 Markus Koschany wrote: > Control: forwarded -1 > https://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8213149 > thanks > > Look like upstream can't reproduce this issue with their custom JDK image. >

Bug#910764: Forward 910764 OpenJFX 11 segmentation fault

2018-10-30 Thread Markus Koschany
Control: forwarded -1 https://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8213149 thanks Look like upstream can't reproduce this issue with their custom JDK image. signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team

Bug#911187: axis: FTBFS with Java 11 due to javax.rmi and CORBA removal

2018-10-30 Thread Markus Koschany
I was investigating the Java 11 FTBFS of axis and uddi4j. I wonder if we rather should focus on removing these packages instead of patching them. Axis has seen its last release in 2006. AFAIK Apache CXF would be a better alternative because it is actively maintained. Unfortunately it is not

Bug#912221: jabref: incompatible with openjdk 11

2018-10-30 Thread Markus Koschany
Am 30.10.18 um 01:15 schrieb Emmanuel Bourg: > Le 30/10/2018 à 00:41, gregor herrmann a écrit : > >> I guess we need to make sure that we build with openjdk-8. >> (You know this better than me but I seem to remember that the plan >> was to keep openjdk-8 in buster for building packages?) > > No

Bug#912231: bnd FTBFS with OpenJDK 11

2018-10-29 Thread Markus Koschany
ava:372) /usr/bin/mh_installpom: line 148: debian/.mh/pom.properties: No such file or directory make: *** [debian/rules:9: binary] Error 1 From: Markus Koschany Date: Mon, 29 Oct 2018 20:36:31 +0100 Subject: java11 Fix biz.aQute.remote/src/aQute/remote/agent/RedirectOutput.java:41: error: nullOutputStrea

Bug#911093: libjetbrains-annotations-java: missing Breaks+Replaces: libintellij-annotations-java (<< 16.0.2-4)

2018-10-25 Thread Markus Koschany
On Mon, 15 Oct 2018 17:48:38 +0200 Andreas Beckmann wrote: > Package: libjetbrains-annotations-java > Version: 16.0.2-4 > Severity: serious > User: debian...@lists.debian.org > Usertags: piuparts replaces-without-breaks > > Hi, > > during a test with piuparts and DOSE tools I noticed your

Bug#910764: openjfx: segmentation fault in GtkNativeMainLoopThread

2018-10-24 Thread Markus Koschany
I believe I have found a way to workaround this issue for the moment. If I pass -Djdk.gtk.version=2 to PDFsam version 3.3.7 it no longer crashes. However there is another issue with fontawesomefx, so there is still some work to do. I think I will forward this issue to the OpenJFX developers

Bug#911709: tomcat7: Security update broke apps with AccessControlException for org.apache.tomcat.util.http

2018-10-23 Thread Markus Koschany
Hello, Am 23.10.18 um 21:20 schrieb Anthony DeRobertis: > Package: tomcat7 > Version: 7.0.56-3+really7.0.91-1 > Severity: important > > After applying the recent security update, the web app we're running > (which is unfortunately a proprietary product provided by a vendor) no > longer works.

Bug#886394: pdfsam still shows the same error although it does give the banner as gimp does while starting up.

2018-10-15 Thread Markus Koschany
Control: severity -1 grave Control: block -1 by 910764 Am 15.10.18 um 15:55 schrieb shirish शिरीष: > Dear all, > > The issue is still prevalent even though you do get a > 'banner'/animation or whatever its called similar to when gimp starts > even though there are now versions of openjfx and

Bug#911079: [pdfsam] Window blank

2018-10-15 Thread Markus Koschany
Control: tags -1 unreproducible Control: severity -1 important Am 15.10.18 um 14:11 schrieb Marco Righi: > Package: pdfsam > Version: 1.1.4-4 > Severity: grave > > --- Please enter the report below this line. --- > Hi, > After pdfsam execution appears only a little box (see image_1). > After

Bug#911078: triplea: Fails to start with NullPointerException

2018-10-15 Thread Markus Koschany
Package: triplea Version: 1.9.0.0.7062-2 Severity: grave Justification: renders package unusable After the switch to OpenJFX 11, triplea fails to start with a NullPointerException. triplea.engine.version.bin:1.9 java.lang.NullPointerException at

Bug#910611: openjfx: draws mediathekview and pdfsam unusable

2018-10-08 Thread Markus Koschany
Control: forcemerge 910395 910611 Am 08.10.18 um 19:37 schrieb Philip Rinn: > Package: openjfx > Version: 11+26-3 > Severity: normal > > Hi, > > since some days (sadly I don't know it the 8 -> 11 update triggered this) > mediathekview and pdfsam don't start anymore: Hi, we are aware of the

Bug#910585: openjfx: no glassgtk3 in java.library.path

2018-10-08 Thread Markus Koschany
Package: openjfx Version: 11+26-3 Severity: serious I have made significant progress with packaging a newer version of MediathekView. However when I try to run the application I get a RuntimeException which indicates that some package is missing. I suspect libopenjfx-jni is the culprit.

Bug#910495: openjfx FTBFS on !x86: offlineasm: No magic values found. Skipping assembly file generation.

2018-10-07 Thread Markus Koschany
Am 07.10.18 um 18:21 schrieb Markus Koschany: > The patch contained a mistake but I just tried it on plummer.debian.org > (ppc64el porterbox) and it unfortunately doesn't make any difference. I should have added that I still think it has something to do with the disabled JIT. The aforemen

Bug#910495: openjfx FTBFS on !x86: offlineasm: No magic values found. Skipping assembly file generation.

2018-10-07 Thread Markus Koschany
The patch contained a mistake but I just tried it on plummer.debian.org (ppc64el porterbox) and it unfortunately doesn't make any difference. signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team

Bug#910495: openjfx FTBFS on !x86: offlineasm: No magic values found. Skipping assembly file generation.

2018-10-07 Thread Markus Koschany
Am 07.10.18 um 14:31 schrieb Emmanuel Bourg: > Control; severity -1 important > > Downgrading the severity, upstream doesn't support non x86 architectures > and the packages are only provided as a best effort. I believe this issue is related to the patches that disable JIT compilation. After

Bug#905215: CVE-2018-2941

2018-10-07 Thread Markus Koschany
Am 07.10.18 um 13:16 schrieb Moritz Muehlenhoff: [...] > No, unfortunately it's the same "we fix, but don't tell" bullshit policy > as with all other Oracle products. > > Given that mediathekview is our only reverse dependency in stretch we > can probably mark it as ignored for stretch anyway?

Bug#905215: CVE-2018-2941

2018-10-07 Thread Markus Koschany
Hi, On Wed, 01 Aug 2018 16:45:30 +0200 Moritz Muehlenhoff wrote: > Source: openjfx > Severity: grave > Tags: security > > http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html > fixed CVE-2018-2941 in JavaFX, which should affect our openjfx package. We have recently

Bug#910501: openjfx: Installs javafx.control jar for javafx.web jar

2018-10-07 Thread Markus Koschany
Package: openjfx Version: 11+26-1 Severity: serious OpenJFX installs the javafx.control jar for javafx.web.jar. Most likely a copy error in libopenjfx-java.poms. This means that web related classes are missing which makes e.g. mediathekview FTBFS. Markus __ This is the maintainer address of

Bug#906383: lombok-patcher: FTBFS in buster/sid

2018-10-02 Thread Markus Koschany
Control: tags -1 pending Control: block -1 by 910112 Fix is ready to upload in Git but blocked by #910112. signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team

Bug#910112: javahelper: jh_linkjars is broken because of fix for multiple dep fields and newlines

2018-10-02 Thread Markus Koschany
Package: javahelper Version: 0.68 Severity: serious The recent javahelper update broke jh_linkjars. This commit introduced the regression https://salsa.debian.org/java-team/javatools/commit/a87bc535da1dcba04e0e5fdca524e00c43de3efe The error manifests for example in lombok-ast and

Bug#909540: tomcat8: ignores umask, sudden(?) regression

2018-09-24 Thread Markus Koschany
Hi, Am 24.09.18 um 23:54 schrieb Thorsten Glaser: > Package: tomcat8 > Version: 8.5.14-1+deb9u3 > Severity: important [...] > Apparently, umask is not (no longer?) honoured. On a jessie box: [...] I guess it would help to check the previous version of Tomcat 8 in Jessie again. If you think this

Bug#907477: maven-debian-helper: does not substitute values of plugins with maven.rules

2018-09-18 Thread Markus Koschany
Am 06.09.18 um 12:52 schrieb Markus Koschany: > > > Am 06.09.2018 um 00:03 schrieb Emmanuel Bourg: >> Le 28/08/2018 à 15:25, Markus Koschany a écrit : >> For plugins and poms the exact type and version have to be specified in >> the substitution rule. For exampl

Bug#908835: dom4j: FTBFS because of javadoc error

2018-09-14 Thread Markus Koschany
Source: dom4j Version: 2.1.1-1 Severity: serious I just stumbled upon this bug. Apparently the last upload was never built on our buildd. There is some kind of javadoc error: javadoc: error - Error fetching URL: file:/usr/share/doc/default-jdk/api/ I may look into this later but filing a bug

Bug#908091: sweethome3d: Immediate crash upon starting 'sweethome3d'

2018-09-06 Thread Markus Koschany
On Thu, 06 Sep 2018 07:59:41 +0300 nikobit wrote: > Package: sweethome3d > Version: 5.7+dfsg-2 > Severity: normal > Tags: newcomer > > Dear Maintainer, > Same as previous bug reporter I would like to say thank you for maintaining > such extraordinary job. Afraid I'm reporting bug 884057 once

Bug#907477: maven-debian-helper: does not substitute values of plugins with maven.rules

2018-09-06 Thread Markus Koschany
Am 06.09.2018 um 00:03 schrieb Emmanuel Bourg: > Le 28/08/2018 à 15:25, Markus Koschany a écrit : > >> I added a new rule to debian/maven.rules >> >> org.apache.xbean maven-xbean-plugin * s/.*/4\.5/ * * >> >> Expected behavior: >> >> The version i

Bug#907863: libeclipse-osgi-java, libequinox-osgi-java: error when trying to install together

2018-09-03 Thread Markus Koschany
Am 03.09.2018 um 15:38 schrieb Emmanuel Bourg: > Hi Markus, > > Le 03/09/2018 à 14:48, Markus Koschany a écrit : > >> I think this could have been better communicated. I was the one who >> split libequinox-osgi-java off from Eclipse. Why can't we just use the >&g

Bug#907863: libeclipse-osgi-java, libequinox-osgi-java: error when trying to install together

2018-09-03 Thread Markus Koschany
Hi, Am 03.09.2018 um 14:04 schrieb Emmanuel Bourg: > Control: reassign -1 libeclipse-osgi-java > Control: affects -1 libequinox-osgi-java > > libeclipse-osgi-java will replace libequinox-osgi-java. I forgot to add > the proper Breaks/Replaces fields. I think this could have been better

Bug#906350: doxia: FTBFS in buster/sid (Cannot find parent dependency org.apache.maven:maven-parent:pom:27)

2018-08-29 Thread Markus Koschany
Control: tags -1 confirmed > [ERROR] The build could not read 1 project -> [Help 1] > [ERROR] > [ERROR] The project org.apache.maven.doxia:doxia:1.7 > (/<>/pom.xml) has 1 error > [ERROR] Invalid packaging for parent POM > org.apache.maven:maven-parent:27, must be "pom" but is "jar" @

Bug#907554: maven-debian-helper: relocations do not work for packaging type pom

2018-08-29 Thread Markus Koschany
Package: maven-debian-helper Version: 2.3 Severity: normal While I was investigating RC bug #906350 in doxia, I discovered that the root cause of the build failure is the relocation of org.apache.maven:maven-parent in libmaven-parent-java. Apparently the idea was to redirect the current version

Bug#907477: maven-debian-helper: does not substitute values of plugins with maven.rules

2018-08-28 Thread Markus Koschany
Package: maven-debian-helper Version: 2.3 Severity: normal Currently mina2 version 2.0.16-2 fails to build from source because Plugin org.apache.xbean:maven-xbean-plugin:4.1 or one of its dependencies could not be resolved: Cannot access central (https://repo.maven.apache.org/maven2) in offline

Bug#906384: lucene-solr: FTBFS in buster/sid

2018-08-25 Thread Markus Koschany
Am 25.08.2018 um 23:27 schrieb Markus Koschany: > Control: tags -1 pending > > The FTBFS was caused by the latest upgrade of libwoodstox-java. The jar > files were renamed and could not be found anymore. > > I am quite sure this is related to #904063 somehow. Once #906447 is

Bug#906447: tomcat8: Errors thrown when connecting

2018-08-25 Thread Markus Koschany
On Fri, 17 Aug 2018 20:50:14 +0300 Vassilis Virvilis wrote: [...] > With java8 installed I am getting the following. Isn't this the sign that is > compiled again against java9/java10? > > 2018-08-17 16:20:46] [crit] java.lang.NoSuchMethodError: >

Bug#906384: lucene-solr: FTBFS in buster/sid

2018-08-25 Thread Markus Koschany
Control: tags -1 pending The FTBFS was caused by the latest upgrade of libwoodstox-java. The jar files were renamed and could not be found anymore. I am quite sure this is related to #904063 somehow. Once #906447 is resolved I could try to verify this assumption. Markus signature.asc

Bug#898935: Tomcat 8 security issues in Stretch

2018-08-24 Thread Markus Koschany
A security update has been sent to Debian's security team and we expect that the current open issues in Stretch will be fixed in due time. Please note that Tomcat 7 in Stretch is not vulnerable to any of those issues because we only build the servlet API. Regards, Markus signature.asc

Bug#898935: migrate fix to stretch security

2018-08-24 Thread Markus Koschany
Version: 8.5.32-1 This issue was fixed in 8.5.32-1. I am going to close this bug report now. Markus signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team .

<    1   2   3   4   >