On Tue, 22 Apr 2025 16:07:59 +0200, Moritz Muehlenhoff wrote:

Your package depends on libpdfbox-java, which is a long EOLed version
with open security issues of what is packaged as libpdfbox2-java for
the current releases of Pdfbox.

Please port your package to use libpdfbox2-java instead.

FWIW, there's an old upstream commit which might be helpful here:

https://github.com/JabRef/jabref/commit/ea8ccb39c73d4f977592eadc5bd3a64c0fafdcab


Cheers,
gregor

--
 .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
`-

Attachment: signature.asc
Description: Digital Signature

__
This is the maintainer address of Debian's Java team
<https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
 Please use
[email protected] for discussions and questions.

Reply via email to