Bug#745897: closed by Hideki Yamane henr...@debian.org (Bug#745897: fixed in libstruts1.2-java 1.2.9-9)

2014-06-16 Thread Emmanuel Bourg
Le 15/06/2014 06:43, Hideki Yamane a écrit :

  Then, question: commons-beanutils version in Debian is
  both seems to be still vulunerable version. Can you provide security-
  backport patch for them? If not, patch to struts1 is still usefull to 
  prevent attack, so push fix to libstruts1.2-java stable/oldstable, right?

I got confirmation from the Struts developers that a new release using
commons-beanutils 1.9.2 is planned soon. So I'm going to prepare the
backport of commons-beanutils 1.9.2 in stable and wait for the new
release of Struts 1.x.

Emmanuel Bourg

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


mysql-connector-java 5.1.31-1 MIGRATED to testing

2014-06-16 Thread Debian testing watch
FYI: The status of the mysql-connector-java source package
in Debian's testing distribution has changed.

  Previous version: 5.1.30-1
  Current version:  5.1.31-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


lucene-solr 3.6.2+dfsg-3 MIGRATED to testing

2014-06-16 Thread Debian testing watch
FYI: The status of the lucene-solr source package
in Debian's testing distribution has changed.

  Previous version: 3.6.2+dfsg-2
  Current version:  3.6.2+dfsg-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


libxbean-java 3.7-6 MIGRATED to testing

2014-06-16 Thread Debian testing watch
FYI: The status of the libxbean-java source package
in Debian's testing distribution has changed.

  Previous version: 3.7-5
  Current version:  3.7-6

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


[bts-link] source package src:openjpa

2014-06-16 Thread bts-link-upstream
#
# bts-link upstream status pull for source package src:openjpa
# see http://lists.debian.org/debian-devel-announce/2006/05/msg1.html
#

user bts-link-upstr...@lists.alioth.debian.org

# remote status report for #750753 (http://bugs.debian.org/750753)
# Bug title: openjpa: FTBFS with Java 8: keySet() in NullSafeConcurrentHashMap 
cannot override keySet() in ConcurrentHashMap
#  * http://issues.apache.org/jira/browse/OPENJPA-2441
#  * remote status changed: (?) - Resolved
#  * remote resolution changed: (?) - Fixed
usertags 750753 + status-Resolved resolution-Fixed

thanks

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


jackson-databind is marked for autoremoval from testing

2014-06-16 Thread Debian testing autoremoval watch
jackson-databind 2.2.2-1 is marked for autoremoval from testing on 2014-07-02

It is affected by these RC bugs:
750267: jackson-databind: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy:jar:debian


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


sikuli is marked for autoremoval from testing

2014-06-16 Thread Debian testing autoremoval watch
sikuli 1.0~x~rc3.tesseract3-dfsg1-7 is marked for autoremoval from testing on 
2014-07-02

It is affected by these RC bugs:
750297: sikuli: FTBFS: org/sikuli/ide/extmanager/ExtensionManagerFrame.java:30: 
error: package org.json.simple does not exist


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


jenkins-json is marked for autoremoval from testing

2014-06-16 Thread Debian testing autoremoval watch
jenkins-json 2.4-jenkins-3-2 is marked for autoremoval from testing on 
2014-07-17

It is affected by these RC bugs:
750309: jenkins-json: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


maven-hpi-plugin is marked for autoremoval from testing

2014-06-16 Thread Debian testing autoremoval watch
maven-hpi-plugin 1.93-1 is marked for autoremoval from testing on 2014-07-17

It (build-)depends on packages with these RC bugs:
750273: stapler: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750303: stapler: maven-hpi-plugin: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750309: jenkins-json: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


maven-stapler-plugin is marked for autoremoval from testing

2014-06-16 Thread Debian testing autoremoval watch
maven-stapler-plugin 1.16-5 is marked for autoremoval from testing on 2014-07-17

It (build-)depends on packages with these RC bugs:
750273: stapler: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750303: stapler: maven-hpi-plugin: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750309: jenkins-json: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


stapler is marked for autoremoval from testing

2014-06-16 Thread Debian testing autoremoval watch
stapler 1.218-1 is marked for autoremoval from testing on 2014-07-17

It is affected by these RC bugs:
750303: stapler: maven-hpi-plugin: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750273: stapler: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian

It (build-)depends on packages with these RC bugs:
750309: jenkins-json: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


stapler-adjunct-timeline is marked for autoremoval from testing

2014-06-16 Thread Debian testing autoremoval watch
stapler-adjunct-timeline 1.4+dfsg-1 is marked for autoremoval from testing on 
2014-07-17

It (build-)depends on packages with these RC bugs:
750273: stapler: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750303: stapler: maven-hpi-plugin: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750309: jenkins-json: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


stapler-adjunct-codemirror is marked for autoremoval from testing

2014-06-16 Thread Debian testing autoremoval watch
stapler-adjunct-codemirror 1.2-1 is marked for autoremoval from testing on 
2014-07-17

It (build-)depends on packages with these RC bugs:
750273: stapler: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750303: stapler: maven-hpi-plugin: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian
750309: jenkins-json: FTBFS: Missing required artifact: 
org.codehaus.groovy:groovy-all:jar:debian


__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#751563: tuxguitar: depends on xulrunner which is no more

2014-06-16 Thread tony mancill
On 06/15/2014 07:36 AM, gregor herrmann wrote:
 On Sat, 14 Jun 2014 09:13:58 -0700, tony mancill wrote:
 
 My tentative conclusion is that MOZILLA_FIVE_HOME was needed at some
 time in the past, doesn't get set since ages, which doesn't cause any
 visible problems.

 So it seems like we can just drop this whole xulrunner/iceweasel
 machinery from debian/{rules,control} and patch misc/tuxguitar.sh
 again to drop it. (And all efforts to update the xulrunner list in
 unstable and also stable was probably in vain.)

 If for some reason having MOZILLA_FIVE_HOME would be good, we need a
 different way to set it. - The web is still full of errors about it,
 and the solution seems to be to set it to /usr/lib/iceweasel or
 /usr/lib/firefox or /usr/lib/mozilla/.

 Thanks for digging into this.  I suggest we move forward with pulling
 out the MOZILLA_FIVE_HOME mechanism and do some testing.  I can work on
 that.
 
 Sounds good, thank you!

Okay, so it's no worse with all of the xulrunner stuff pulled out, so
there's no problem with going ahead with a simplified wrapper script and
removing that dependency.

I guess I can go ahead with another upload.  I spent some time looking
at #745127, but wasn't able to make any real progress.  It's a shame,
because it's quite annoying.  (But I guess that's a different bug.)

I'll upload this week.
tony




signature.asc
Description: OpenPGP digital signature
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.