On Tue, Feb 11, 2014 at 08:10:28AM +0100, Emmanuel Bourg wrote:
> Le 11/02/2014 05:16, tony mancill a écrit :
> > Instead of Built-Using or updating debian/copyright, it seems preferable
> > to refactor the source to use the actual libasm3-java JAR, although I
> > haven't yet looked into how much effort that will require.
> Please don't depend on asm3 at runtime. jarjar is used to relocate the
> asm classes under a different package. This is necessary to avoid
> classpath conflicts between different versions of asm.

Have you talked to the security team about this?  Where does Debian ship
different versions of asm?


What kind of love is that?  Not to be loved; never to have shown love.
                -- Commissioner Nancy Hedford, "Metamorphosis",
                   stardate 3219.8

This is the maintainer address of Debian's Java team
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to