Your message dated Fri, 09 Nov 2018 16:04:52 +0000
with message-id <[email protected]>
and subject line Bug#913307: fixed in osmosis 0.47-3
has caused the Debian Bug report #913307,
regarding osmosis: please switch to libmariadb-java
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
913307: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913307
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: osmosis
Version: 0.47-2
Severity: important
Tags: patch
Hello,
we would like to remove libmysql-java from Debian because it is
frequently affected by security vulnerabilities which are not fully
disclosed. This makes it hard to determine the impact of such a flaw.[1]
However we also have libmariadb-java which is a drop-in replacement
and upstream is more transparent about security issues.
Please find attached two patches that make the necessary changes to
the Debian packaging.
[1] https://bugs.debian.org/912916
Regards,
Markus
>From 561c7f24a826bd66698eab804e52b7e4e2e9d2c1 Mon Sep 17 00:00:00 2001
From: Markus Koschany <[email protected]>
Date: Fri, 9 Nov 2018 13:39:08 +0100
Subject: [PATCH 1/2] Switch from libmysql-java to libmariadb-java.
---
debian/control | 4 ++--
debian/maven.rules | 1 +
debian/patches/02-fix_plexus.patch | 2 +-
3 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/debian/control b/debian/control
index 1484230..fb9f2af 100644
--- a/debian/control
+++ b/debian/control
@@ -17,7 +17,7 @@ Build-Depends: debhelper (>= 9),
libcommons-dbcp-java,
libjdepend-java,
libjpf-java,
- libmysql-java,
+ libmariadb-java,
# libnetty-3.9-java,
libpostgis-java,
libpostgresql-jdbc-java,
@@ -47,7 +47,7 @@ Depends: default-jre-headless | java8-runtime-headless,
libcommons-dbcp-java,
libcommons-pool-java,
libjpf-java,
- libmysql-java,
+ libmariadb-java,
# libnetty-3.9-java,
libpostgis-java,
libpostgresql-jdbc-java,
diff --git a/debian/maven.rules b/debian/maven.rules
index 71365ce..3898b15 100644
--- a/debian/maven.rules
+++ b/debian/maven.rules
@@ -5,3 +5,4 @@ org.springframework spring-jdbc * s/.*/debian/ * *
#s/org.jboss.netty/io.netty/ netty * s/.*/debian/ * *
s/org.postgis/net.postgis/ postgis-jdbc * s/.*/debian/ * *
s/com.fasterxml.woodstox/org.codehaus.woodstox/
s/woodstox-core/woodstox-core-lgpl/ * s/.*/debian/ * *
+s/mysql/org.mariadb.jdbc/ s/mysql-connector-java/mariadb-java-client/ *
s/.*/debian/ * *
diff --git a/debian/patches/02-fix_plexus.patch
b/debian/patches/02-fix_plexus.patch
index 26151a2..4fc867c 100644
--- a/debian/patches/02-fix_plexus.patch
+++ b/debian/patches/02-fix_plexus.patch
@@ -14,7 +14,7 @@ Forwarded: not-needed
+load /usr/share/java/commons-compress.jar
+load /usr/share/java/commons-codec.jar
+load /usr/share/java/commons-dbcp.jar
-+load /usr/share/java/mysql-connector-java.jar
++load /usr/share/java/mariadb-java-client.jar
+load /usr/share/java/postgis-jdbc.jar
+load /usr/share/java/postgresql.jar
+load /usr/share/java/spring3-beans.jar
--
2.19.1
>From 4b71149fb6e54088c184c0a6d75bce327688dfb6 Mon Sep 17 00:00:00 2001
From: Markus Koschany <[email protected]>
Date: Fri, 9 Nov 2018 13:56:12 +0100
Subject: [PATCH 2/2] Add mariadb.patch
---
debian/patches/mariadb.patch | 24 ++++++++++++++++++++++++
debian/patches/series | 1 +
2 files changed, 25 insertions(+)
create mode 100644 debian/patches/mariadb.patch
diff --git a/debian/patches/mariadb.patch b/debian/patches/mariadb.patch
new file mode 100644
index 0000000..86e2359
--- /dev/null
+++ b/debian/patches/mariadb.patch
@@ -0,0 +1,24 @@
+From: Markus Koschany <[email protected]>
+Date: Fri, 9 Nov 2018 13:55:11 +0100
+Subject: mariadb
+
+Use MariaDB driver class.
+
+Forwarded: no
+---
+ .../java/org/openstreetmap/osmosis/apidb/common/DataSourceFactory.java | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git
a/osmosis-apidb/src/main/java/org/openstreetmap/osmosis/apidb/common/DataSourceFactory.java
b/osmosis-apidb/src/main/java/org/openstreetmap/osmosis/apidb/common/DataSourceFactory.java
+index fe0f28d..adc4924 100644
+---
a/osmosis-apidb/src/main/java/org/openstreetmap/osmosis/apidb/common/DataSourceFactory.java
++++
b/osmosis-apidb/src/main/java/org/openstreetmap/osmosis/apidb/common/DataSourceFactory.java
+@@ -38,7 +38,7 @@ public final class DataSourceFactory {
+ /*+ "?loglevel=2"*/);
+ break;
+ case MYSQL:
+- dataSource.setDriverClassName("com.mysql.jdbc.Driver");
++ dataSource.setDriverClassName("com.mariadb.jdbc.Driver");
+ dataSource.setUrl("jdbc:mysql://" + credentials.getHost() + "/"
+ credentials.getDatabase());
+ break;
+ default:
diff --git a/debian/patches/series b/debian/patches/series
index abefb2d..ef0b803 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -2,3 +2,4 @@
02-fix_plexus.patch
04-osmosis-version.patch
disable-netty3.patch
+mariadb.patch
--
2.19.1
--- End Message ---
--- Begin Message ---
Source: osmosis
Source-Version: 0.47-3
We believe that the bug you reported is fixed in the latest version of
osmosis, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bas Couwenberg <[email protected]> (supplier of updated osmosis package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 09 Nov 2018 16:14:34 +0100
Source: osmosis
Binary: osmosis
Architecture: source all
Version: 0.47-3
Distribution: unstable
Urgency: medium
Maintainer: Debian GIS Project <[email protected]>
Changed-By: Bas Couwenberg <[email protected]>
Description:
osmosis - Command line OpenStreetMap data processor
Closes: 913307
Changes:
osmosis (0.47-3) unstable; urgency=medium
.
* Apply patches by Markus Koschany to use libmariadb-java.
(closes: #913307)
Checksums-Sha1:
d6523aa9fb700f0a5da93ceb4982e80983715b44 2465 osmosis_0.47-3.dsc
713a2329d54047d3a88e015a107e656edc837c72 11460 osmosis_0.47-3.debian.tar.xz
da24196db0485f9084d318a4ce25fd5dd59beefd 1030028 osmosis_0.47-3_all.deb
1efa23bf649d4230c8a70e8ef7da3c2d1d5c6f9e 15208 osmosis_0.47-3_amd64.buildinfo
Checksums-Sha256:
2bead96275e424e204b17a039ef7b6e24589a84fe3c50c24f15117114ab4f4db 2465
osmosis_0.47-3.dsc
516d42889028abfcf70bc891cbab0428063c129a9bbf56be73f78d8ed012158b 11460
osmosis_0.47-3.debian.tar.xz
236897a1ac637358ff081ea93f3a3b89c654e73c02f0895772c84c1f38ab34f6 1030028
osmosis_0.47-3_all.deb
4422b3ba2dcc0e1d811e015eae8384850cca8a23568695392ddc17828f3dcf40 15208
osmosis_0.47-3_amd64.buildinfo
Files:
778fc9aee7b9772661427e1d42bbf709 2465 utils optional osmosis_0.47-3.dsc
17ff9adfcc3268491c49e1bc26190acc 11460 utils optional
osmosis_0.47-3.debian.tar.xz
cadec040be187e6a7d3096648adcb320 1030028 utils optional osmosis_0.47-3_all.deb
739166d0dfa566f49eaa160ee846ca67 15208 utils optional
osmosis_0.47-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=kb9f
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-grass-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-grass-devel
