[Branch ~openjdk/openjdk/openjdk8] Rev 672: openjdk-8 (8u77-b03-1) unstable; urgency=medium

[noreply]

revno: 672
committer: Matthias Klose 
branch nick: openjdk8
timestamp: Wed 2016-03-30 01:24:36 +0200
message:
  openjdk-8 (8u77-b03-1) unstable; urgency=medium
  
* Update to 8u77-b03.
  - Addresses CVE-2016-0636: Improve MethodHandle consistency.
* Build-depend on openjdk-8-jdk-headless .
* Disablethe atk bridge again on Ubuntu xenial (failing TCK tests).
* Use versioned Build-Depends on autoconf (>= 2.69). Closes: #818626.
* Stop providing java-runtime, java-runtine-headleass, java-compiler.
  Closes: #815475.
* Fix logic for libgnome/libgconf recommendations. Closes: #813943.
  
   -- Matthias Klose   Wed, 30 Mar 2016 00:10:38 +0200
modified:
  corba.tar.xz
  debian/changelog
  debian/control
  debian/control.in
  debian/rules
  hotspot-aarch64.tar.xz
  hotspot.tar.xz
  jaxp.tar.xz
  jaxws.tar.xz
  jdk.tar.xz
  langtools.tar.xz
  nashorn.tar.xz
  root.tar.xz


--
lp:~openjdk/openjdk/openjdk8
https://code.launchpad.net/~openjdk/openjdk/openjdk8

Your team Debian Java Maintainers is subscribed to branch 
lp:~openjdk/openjdk/openjdk8.
To unsubscribe from this branch go to 
https://code.launchpad.net/~openjdk/openjdk/openjdk8/+edit-subscription
=== modified file 'corba.tar.xz'
Binary files corba.tar.xz	2016-01-23 20:45:24 + and corba.tar.xz	2016-03-29 23:24:36 + differ
=== modified file 'debian/changelog'
--- debian/changelog	2016-02-27 10:49:27 +
+++ debian/changelog	2016-03-29 23:24:36 +
@@ -1,8 +1,15 @@
-openjdk-8 (8u72-b15-5) UNRELEASED; urgency=medium
+openjdk-8 (8u77-b03-1) unstable; urgency=medium
 
+  * Update to 8u77-b03.
+- Addresses CVE-2016-0636: Improve MethodHandle consistency.
   * Build-depend on openjdk-8-jdk-headless .
+  * Disablethe atk bridge again on Ubuntu xenial (failing TCK tests).
+  * Use versioned Build-Depends on autoconf (>= 2.69). Closes: #818626.
+  * Stop providing java-runtime, java-runtine-headleass, java-compiler.
+Closes: #815475.
+  * Fix logic for libgnome/libgconf recommendations. Closes: #813943.
 
- -- Matthias Klose   Sat, 27 Feb 2016 11:37:08 +0100
+ -- Matthias Klose   Wed, 30 Mar 2016 00:10:38 +0200
 
 openjdk-8 (8u72-b15-4) unstable; urgency=medium
 

=== modified file 'debian/control'
--- debian/control	2016-02-27 10:49:27 +
+++ debian/control	2016-03-29 23:24:36 +
@@ -5,7 +5,7 @@
 Uploaders: Matthias Klose 
 Build-Depends: debhelper (>= 5), quilt, m4, lsb-release, zip, unzip,
   sharutils, gawk, cpio, pkg-config, procps, wdiff, fastjar (>= 2:0.96-0ubuntu2),
-  autoconf, automake, autotools-dev, ant, ant-optional,  libtool,
+  autoconf (>= 2.69), automake, autotools-dev, ant, ant-optional,  libtool,
   g++-5, g++-4.9 [mips mipsel mips64 mips64el],
   openjdk-8-jdk | openjdk-7-jdk,
   libxtst-dev, libxi-dev, libxt-dev, libxaw7-dev, libxrender-dev, libcups2-dev, libasound2-dev, liblcms2-dev, libfreetype6-dev (>= 2.2.1), libgtk2.0-dev, libxinerama-dev, libkrb5-dev, xsltproc, libpcsclite-dev,
@@ -28,7 +28,7 @@
 Suggests: openjdk-8-demo, openjdk-8-source
 Provides: java-sdk-headless, java2-sdk-headless,
   java5-sdk-headless, java6-sdk-headless,
-  java7-sdk-headless, java8-sdk-headless, java-compiler
+  java7-sdk-headless, java8-sdk-headless,
 Replaces: openjdk-8-jdk (<< 8u72-b15-4),
 Description: OpenJDK Development Kit (JDK) (headless)
  OpenJDK is a development environment for building applications,
@@ -50,7 +50,7 @@
   libnss-mdns,
   fonts-dejavu-extra,
   fonts-ipafont-gothic, fonts-ipafont-mincho, ttf-wqy-microhei | ttf-wqy-zenhei, fonts-indic,
-Provides: java-runtime-headless, java2-runtime-headless,
+Provides: java2-runtime-headless,
   java5-runtime-headless, java6-runtime-headless,
   java7-runtime-headless, java8-runtime-headless,
   ${defaultvm:Provides}, ${jvm:Provides}
@@ -90,7 +90,7 @@
 Recommends: ${dlopenjre:Recommends}, fonts-dejavu-extra
 Suggests: icedtea-8-plugin, ${pkg:pulseaudio}
 Replaces: openjdk-8-jre-headless (<< 8u20~b20-3)
-Provides: java-runtime, java2-runtime,
+Provides: java2-runtime,
   java5-runtime, java6-runtime,
   java7-runtime, java8-runtime
 Description: OpenJDK Java runtime, using ${vm:Name}

=== modified file 'debian/control.in'
--- debian/control.in	2016-02-27 10:49:27 +
+++ debian/control.in	2016-03-29 23:24:36 +
@@ -28,7 +28,7 @@
 Suggests: @basename@-demo, @basename@-source
 Provides: java-sdk-headless, java2-sdk-headless,
   java5-sdk-headless, java6-sdk-headless,
-  java7-sdk-headless, java8-sdk-headless, java-compiler
+  java7-sdk-headless, java8-sdk-headless,
 Replaces: @basename@-jdk (<< 8u72-b15-4),
 Description: OpenJDK Development Kit (JDK) (headless)
  OpenJDK is a development environment for building applications,
@@ -50,7 +50,7 @@
   libnss-mdns,
   @core_fonts@,
   @cjk_fonts@
-Provides: java-runtime-headless, java2-runtime-headless,
+Provides: java2-runtime-headless,
   java5-runtime-headless, java6-runtime-headless,
   java7-runtime-headless, java8-runtime-headless,
   ${de

jasmin-sable_2.5.0-1_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 29 Mar 2016 19:11:24 +0200
Source: jasmin-sable
Binary: jasmin-sable
Architecture: source all
Version: 2.5.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 jasmin-sable - Java class (.class) file assembler
Changes:
 jasmin-sable (2.5.0-1) unstable; urgency=medium
 .
   * New upstream release
 - Refreshed the patches
   * debian/rules:
 - Set the build properties
 - Removed the deprecated compile.optimize parameter
 - No longer call 'ant clean' twice
 - Install jasmin-sable-$(VERSION).jar in /usr/share/java
   * Standards-Version updated to 3.9.7 (no changes)
   * Use a secure Vcs-Git URL
   * Switch to debhelper level 9
Checksums-Sha1:
 1c060da235554df19380b941fb975c4bbecd099c 2012 jasmin-sable_2.5.0-1.dsc
 287cfefd5dffc46b73f0840d3fac057d4a958ce5 87552 jasmin-sable_2.5.0.orig.tar.xz
 1d55f385a338d1ef3eb88571060c5d31989263c9 5028 
jasmin-sable_2.5.0-1.debian.tar.xz
 20b39e48b63be89eb4bd457bed4e2383e42fd411 188896 jasmin-sable_2.5.0-1_all.deb
Checksums-Sha256:
 1743882e0fb9461c83ad89b97f3560a0ca2e9b7ab37338157c7429126d8b1897 2012 
jasmin-sable_2.5.0-1.dsc
 14fc8d13ba0e89ec2a2b926f84b3b51e1be5b80f6f4e54a234b540a48edb9eba 87552 
jasmin-sable_2.5.0.orig.tar.xz
 c23fbf1e1cf4dbaa2921b3ea3d8c7a330f3b7759b55ce48ad9b8c0c0c2680b06 5028 
jasmin-sable_2.5.0-1.debian.tar.xz
 8f16375da9af57ed617a23e06205fefc0e232f315c3f119846a82ed720d0373d 188896 
jasmin-sable_2.5.0-1_all.deb
Files:
 601ac539486c7f0635aaf224821c191d 2012 devel optional jasmin-sable_2.5.0-1.dsc
 746de066327d5a4918f68144faf99572 87552 devel optional 
jasmin-sable_2.5.0.orig.tar.xz
 24c87313e92b713cac6d4713246e7f7f 5028 devel optional 
jasmin-sable_2.5.0-1.debian.tar.xz
 cdc8f499e823407f3dad5a72edaae2ee 188896 devel optional 
jasmin-sable_2.5.0-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=FESK
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of jasmin-sable_2.5.0-1_amd64.changes

[Debian FTP Masters]

jasmin-sable_2.5.0-1_amd64.changes uploaded successfully to localhost
along with the files:
  jasmin-sable_2.5.0-1.dsc
  jasmin-sable_2.5.0.orig.tar.xz
  jasmin-sable_2.5.0-1.debian.tar.xz
  jasmin-sable_2.5.0-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

libjna-java 4.2.2-1 MIGRATED to testing

[Debian testing watch]

FYI: The status of the libjna-java source package
in Debian's testing distribution has changed.

  Previous version: 4.2.1-1
  Current version:  4.2.2-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

mqtt-client_1.12-1_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 29 Mar 2016 17:14:28 +0200
Source: mqtt-client
Binary: libmqtt-client-java
Architecture: source all
Version: 1.12-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libmqtt-client-java - Java MQTT Client API
Changes:
 mqtt-client (1.12-1) unstable; urgency=medium
 .
   * New upstream release
   * Build with the DH sequencer instead of CDBS
   * Standards-Version updated to 3.9.7 (no changes)
   * Use a secure Vcs-Git URL
Checksums-Sha1:
 45b1ce03a67383c0c3ccff3583e480bb7f39b24c 2056 mqtt-client_1.12-1.dsc
 4afac9797bf1dab49a14d74682320560a1e6453e 100504 mqtt-client_1.12.orig.tar.xz
 20493baaf435eaa89d7fe50d7135d2dc0103b5d8 2664 mqtt-client_1.12-1.debian.tar.xz
 e267b79c17b30b3662e581cff3b9fe479972d1b4 104724 
libmqtt-client-java_1.12-1_all.deb
Checksums-Sha256:
 140ce82907f5b95d01c4e7cdb2cd331feb40a45b50b58f8f6e4e8662e262d4d4 2056 
mqtt-client_1.12-1.dsc
 0d3f8ef34bb7e171b76b2c2da9e26f2acb6aebd7d462ddbbc4a86c7c24763cd0 100504 
mqtt-client_1.12.orig.tar.xz
 c8ca8e0e2e46bf21f68dd532fd625c0d3d302def39684d6ceb88e2e31afe8a4c 2664 
mqtt-client_1.12-1.debian.tar.xz
 227de64f33e0209d5987716e1f25b48a7c3a5fbfdef6938ccc13fd9a5ad11b6c 104724 
libmqtt-client-java_1.12-1_all.deb
Files:
 782745ab01feede5f9ec1c3754fff8ab 2056 java optional mqtt-client_1.12-1.dsc
 ad41cc70a74bb97b814f0858f4a6124f 100504 java optional 
mqtt-client_1.12.orig.tar.xz
 c765bd4af1afd5ef5c9fa1bbe449cdb4 2664 java optional 
mqtt-client_1.12-1.debian.tar.xz
 55c591fa54463baf4886ea2aa033812a 104724 java optional 
libmqtt-client-java_1.12-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBCAAGBQJW+pwQAAoJEPUTxBnkudCsGNcQAL6kl2hnvg4k2IVjTg0nUCbt
I9iZnH81QwOZrNJEheWgPCpGw9UwDI1Ldw1M2pVvF/jrJIE1y57F+1UC81i/ZihT
hUOWx6gs13rW4Ioqrxbo/3BluwqxjdZ6HyOm9FnzhujE3E3z+eLILJQVaTYu0RwO
PVAKF6+tcwDMk7pxIZl91TQPe3jIeixc6SrvCu26tdmxQBi96c9ov0rjYL9LoHNV
H6x/8L3B+G0sg/rfbammc3uje+7cyJByLTNfrkCOKKcJ587iXAjxf+n5MMPcCb0c
WWUtt1LzurMAgv9KqqQ3YIzFyqQuvHiursZlwyJZtxI7oCnfnJTk7ASjbZHiURYL
z8Uu2VM3UNfjDI5XbbGft6PUgLzf703+jE4Ds96LmCfdqy0fhTlUG7mttgnf2Ug+
EmpZgIpYVnFMMOAJPJdl8agY2M2vvMSu9sdS6hVS8dhZEpfnYK46gT/9YXx4bCY5
kWWlSWQJ2D6Mc+xXXUd5SDCvKYNsOFfT1O5EWEXb3hmBpFNlIFjc9K/lk/S4HORA
PXmf02CL6i8AtQwPGVD04sVZq71805cnQ8N8ZFhNSfnTQsvKkQFLko5DJptzVhCG
MS4KwAsXLnHcv39R+MWvoMhP4zp/10hP/8F8wfzB2aUvb/R1zlr1GXpTc50HPee9
pq609Ivtkb0idWWBQKRT
=n64O
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

jdeb_1.5-1_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 29 Mar 2016 17:00:37 +0200
Source: jdeb
Binary: libjdeb-java
Architecture: source all
Version: 1.5-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libjdeb-java - utility to construct Debian packages from Ant or Maven
Changes:
 jdeb (1.5-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
 - Refreshed the patches
 - Ignore the jacoco and coveralls plugins
   * Standards-Version updated to 3.9.7 (no changes)
   * Use a secure Vcs-Git URL
Checksums-Sha1:
 6bca9cb10ca6b416ceab90dc071346a8044d8147 2188 jdeb_1.5-1.dsc
 aac852d4419e4f8905c7efb5bef5ad8d5391389d 65304 jdeb_1.5.orig.tar.xz
 e76729620d4ca6783dfed22fb16ed81cecbfe1dc 3584 jdeb_1.5-1.debian.tar.xz
 8adb490d712d7db1dbd21ba3c082cd43dff32ba1 592482 libjdeb-java_1.5-1_all.deb
Checksums-Sha256:
 58df5408e026f4a499bee606476ddc26da8556a7d37be9812398a92a2468fbc3 2188 
jdeb_1.5-1.dsc
 9a5b7eb0e0f951fcf84825fb32245e1e57fed5485c59ce55aedd54625007ce40 65304 
jdeb_1.5.orig.tar.xz
 1cdf9c64cb6526f184fc116cc7412a8aeb03281053a21adb0e8063960e1ecea9 3584 
jdeb_1.5-1.debian.tar.xz
 f8aa638009e7370a626736b61fc9a3739f255f5ca0ffc484660fd8c961b6334f 592482 
libjdeb-java_1.5-1_all.deb
Files:
 c0d3e1ac7bd58b5f4a7330a648b780b1 2188 java optional jdeb_1.5-1.dsc
 e368c1a99cd156b36effb203c393d8f9 65304 java optional jdeb_1.5.orig.tar.xz
 9ed3876d267f0e992db811bd03a31e3d 3584 java optional jdeb_1.5-1.debian.tar.xz
 00292be67db65dbd3691cc12b089c7af 592482 java optional 
libjdeb-java_1.5-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBCAAGBQJW+pjpAAoJEPUTxBnkudCs/WUP/3OgO6pwp+UvL/Y0XmIun3GO
Ox/UEGAktjMKH2ONHU49NZug3RiBLeJyK7biyrD5ZHSoPKlKk/TTUl9wYJgMmjMp
lZ6smtDKU4qElJyvU3bmaSto3I2bYEu+ioHgwXeTWBrEbR+JBLpHfZPj3R4vawkT
ZcVdQiBl8JrpAK0b0A4bW9UAvxZLGMetNevczzaRuIekrHZCDCbZbDcCpaMx1GCL
wntwaZATsVOTOtJh1WtNn3Kum1GWjAOxMD8EPlsxi5LQ7pJ5w4plr09eRQgDSAcX
y7K6+YK6zi4RVOm50iOIOzFbcGg1jCTHicNYKOIqbgKB9ih/kRG+M6DY2QdT0uq0
EwAOF0ui2fHQw1NcAoB+c+VkGNIru/BYJQ5ugMN+gJGwbu7AuG4s+gjC+k/HxlSP
EQ1DEJZ/P05DKq37NJho/Gh8URlIpiSSlvDwtvhxYlbi20P/E2TwSwDmwJcCRl1y
1wh/GBAaPN+aIilhYsGfQqVsB9gmKOxJM/4Cp3RpOaCQI6o6Xeji+xnSN4bp0H/w
YYwSP37z7J6LPJY1gAx25YXm6gKHtqC3dUWCWuGUg12qvglCY32g8iCmnMP4Dh1Q
22qyiF+x57QzOsyCx4NH8bZ0UD3dzI3lKyNylf78YVydpd6GWWoc+jtAXFyxTlyO
zMW3NwVBzfGLZG8w/krH
=B7wq
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of mqtt-client_1.12-1_amd64.changes

[Debian FTP Masters]

mqtt-client_1.12-1_amd64.changes uploaded successfully to localhost
along with the files:
  mqtt-client_1.12-1.dsc
  mqtt-client_1.12.orig.tar.xz
  mqtt-client_1.12-1.debian.tar.xz
  libmqtt-client-java_1.12-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of jdeb_1.5-1_amd64.changes

[Debian FTP Masters]

jdeb_1.5-1_amd64.changes uploaded successfully to localhost
along with the files:
  jdeb_1.5-1.dsc
  jdeb_1.5.orig.tar.xz
  jdeb_1.5-1.debian.tar.xz
  libjdeb-java_1.5-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of abego-treelayout_1.0.3-1_amd64.changes

[Debian FTP Masters]

abego-treelayout_1.0.3-1_amd64.changes uploaded successfully to localhost
along with the files:
  abego-treelayout_1.0.3-1.dsc
  abego-treelayout_1.0.3.orig.tar.xz
  abego-treelayout_1.0.3-1.debian.tar.xz
  libtreelayout-java_1.0.3-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

felix-utils_1.8.2-1_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 29 Mar 2016 15:34:22 +0200
Source: felix-utils
Binary: libfelix-utils-java libfelix-utils-java-doc
Architecture: source all
Version: 1.8.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libfelix-utils-java - collection of utility classes for Apache Felix
 libfelix-utils-java-doc - collection of utility classes for Apache Felix - 
documentation
Changes:
 felix-utils (1.8.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
   * Build with the DH sequencer instead of CDBS
   * Standards-Version updated to 3.9.7 (no changes)
   * Use secure Vcs-* URLs
Checksums-Sha1:
 f81b5fd09bc2f07efd927b999de32fef415222cc 2164 felix-utils_1.8.2-1.dsc
 cb16347f841950a4d45dbe0a45edf7bfda624888 35624 felix-utils_1.8.2.orig.tar.xz
 1c6a4512d8b1df57a955f92775d310f7b07fbc53 4276 felix-utils_1.8.2-1.debian.tar.xz
 3d4bd1bc896926811148771c2471e21e8665e285 44584 
libfelix-utils-java-doc_1.8.2-1_all.deb
 ca8d8a61bfc6546259081951eac4532224f0eeed 64754 
libfelix-utils-java_1.8.2-1_all.deb
Checksums-Sha256:
 7dcf27177c75bf83ce2cfcf21f5cc9fc9109655a234da52cf3d321d7b3908c73 2164 
felix-utils_1.8.2-1.dsc
 7b7a9a9697409ff80362f436088a16ac3d6b98db4c3e4c63e7ba36dc347373bd 35624 
felix-utils_1.8.2.orig.tar.xz
 5003df8d555c2be31ffc3022c144f61f40fc619d7d3e95e45daa9f6cd28dee4b 4276 
felix-utils_1.8.2-1.debian.tar.xz
 ddf5733e8f99ea8da044d6a8086cea05f11aefad51585cde075d3d71710e32f7 44584 
libfelix-utils-java-doc_1.8.2-1_all.deb
 7100b4dcd7d3d6952ee307aa51d7851b1c5971e9581a3e9b883cd6794c68f3c6 64754 
libfelix-utils-java_1.8.2-1_all.deb
Files:
 90f5b05fceed536eb0dbc8f23cb87c02 2164 java optional felix-utils_1.8.2-1.dsc
 bad1058a16081956958cf1b2c1ef867a 35624 java optional 
felix-utils_1.8.2.orig.tar.xz
 95c39b6d5c706195006dd363c8e5bae9 4276 java optional 
felix-utils_1.8.2-1.debian.tar.xz
 a28923cf400e755e947a3917c86c324e 44584 doc optional 
libfelix-utils-java-doc_1.8.2-1_all.deb
 f4bfbc118281dbfd5e4810b8e4ea4102 64754 java optional 
libfelix-utils-java_1.8.2-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=ANZ1
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of felix-utils_1.8.2-1_amd64.changes

[Debian FTP Masters]

felix-utils_1.8.2-1_amd64.changes uploaded successfully to localhost
along with the files:
  felix-utils_1.8.2-1.dsc
  felix-utils_1.8.2.orig.tar.xz
  felix-utils_1.8.2-1.debian.tar.xz
  libfelix-utils-java-doc_1.8.2-1_all.deb
  libfelix-utils-java_1.8.2-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#819455: marked as done (libxstream-java: CVE-2016-3674: XXE vulnerability)

[Debian Bug Tracking System]

Your message dated Tue, 29 Mar 2016 11:19:23 +
with message-id 
and subject line Bug#819455: fixed in libxstream-java 1.4.9-1
has caused the Debian Bug report #819455,
regarding libxstream-java: CVE-2016-3674: XXE vulnerability
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
819455: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819455
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libxstream-java
Version: 1.4.2-1
Severity: important
Tags: security upstream fixed-upstream
Forwarded: https://github.com/x-stream/xstream/issues/25

Hi,

the following vulnerability was published for libxstream-java.

CVE-2016-3674[0]:
XXE vulnerability

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-3674
[1] https://github.com/x-stream/xstream/issues/25

Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: libxstream-java
Source-Version: 1.4.9-1

We believe that the bug you reported is fixed in the latest version of
libxstream-java, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 819...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emmanuel Bourg  (supplier of updated libxstream-java package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 29 Mar 2016 12:05:49 +0200
Source: libxstream-java
Binary: libxstream-java
Architecture: source all
Version: 1.4.9-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libxstream-java - Java library to serialize objects to XML and back again
Closes: 819455
Changes:
 libxstream-java (1.4.9-1) unstable; urgency=medium
 .
   * New upstream release
 - Fixes CVE-2016-3674: XML External Entity vulnerability (Closes: #819455)
 - Ignore the new xstream-jmh module
 - Updated the Maven rules
   * No longer build the xstream-benchmark module (never used in Debian)
   * Build with maven-debian-helper
   * Depend on libcglib-nodep-java instead of libcglib3-java
   * Standards-Version updated to 3.9.7 (no changes)
   * Use secure Vcs-* fields
   * Updated the old references to codehaus.org
Checksums-Sha1:
 4cf4ec64900223bfa333836874027744232d8547 2392 libxstream-java_1.4.9-1.dsc
 0495145c1d88722ee4331265a30ce93d5dab6bda 419660 
libxstream-java_1.4.9.orig.tar.xz
 1dbdca9aeee30d1d5f6e143103a9381cfc5c562d 6232 
libxstream-java_1.4.9-1.debian.tar.xz
 9afd8dacf870f8b4db79264868900bb91f95c5da 499872 libxstream-java_1.4.9-1_all.deb
Checksums-Sha256:
 3967f17b4675a4fce56e09a1620e27961652a023634875322bb3ebe9c1929702 2392 
libxstream-java_1.4.9-1.dsc
 f97c2c723e03892859c69242397815a00b10ae1da0ca78d6c9b1f51397752c66 419660 
libxstream-java_1.4.9.orig.tar.xz
 7db86593bc736a00d87ee936af11e925c1ccbd37fb0dd63457dbf0407972b376 6232 
libxstream-java_1.4.9-1.debian.tar.xz
 94f28584d0e3fef8cf6fa81d29bce93107007787ff183713eb03a6025c068c27 499872 
libxstream-java_1.4.9-1_all.deb
Files:
 b2652b2d00e8de2f643097f1cc2be922 2392 java optional libxstream-java_1.4.9-1.dsc
 259d2a02e54c3b6deb41fe2861f74d87 419660 java optional 
libxstream-java_1.4.9.orig.tar.xz
 8e8386e823bf938d034334275c18144a 6232 java optional 
libxstream-java_1.4.9-1.debian.tar.xz
 442e2b05d0c401f70c0f2032676da156 499872 java optional 
libxstream-java_1.4.9-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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libxstream-java_1.4.9-1_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 29 Mar 2016 12:05:49 +0200
Source: libxstream-java
Binary: libxstream-java
Architecture: source all
Version: 1.4.9-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libxstream-java - Java library to serialize objects to XML and back again
Closes: 819455
Changes:
 libxstream-java (1.4.9-1) unstable; urgency=medium
 .
   * New upstream release
 - Fixes CVE-2016-3674: XML External Entity vulnerability (Closes: #819455)
 - Ignore the new xstream-jmh module
 - Updated the Maven rules
   * No longer build the xstream-benchmark module (never used in Debian)
   * Build with maven-debian-helper
   * Depend on libcglib-nodep-java instead of libcglib3-java
   * Standards-Version updated to 3.9.7 (no changes)
   * Use secure Vcs-* fields
   * Updated the old references to codehaus.org
Checksums-Sha1:
 4cf4ec64900223bfa333836874027744232d8547 2392 libxstream-java_1.4.9-1.dsc
 0495145c1d88722ee4331265a30ce93d5dab6bda 419660 
libxstream-java_1.4.9.orig.tar.xz
 1dbdca9aeee30d1d5f6e143103a9381cfc5c562d 6232 
libxstream-java_1.4.9-1.debian.tar.xz
 9afd8dacf870f8b4db79264868900bb91f95c5da 499872 libxstream-java_1.4.9-1_all.deb
Checksums-Sha256:
 3967f17b4675a4fce56e09a1620e27961652a023634875322bb3ebe9c1929702 2392 
libxstream-java_1.4.9-1.dsc
 f97c2c723e03892859c69242397815a00b10ae1da0ca78d6c9b1f51397752c66 419660 
libxstream-java_1.4.9.orig.tar.xz
 7db86593bc736a00d87ee936af11e925c1ccbd37fb0dd63457dbf0407972b376 6232 
libxstream-java_1.4.9-1.debian.tar.xz
 94f28584d0e3fef8cf6fa81d29bce93107007787ff183713eb03a6025c068c27 499872 
libxstream-java_1.4.9-1_all.deb
Files:
 b2652b2d00e8de2f643097f1cc2be922 2392 java optional libxstream-java_1.4.9-1.dsc
 259d2a02e54c3b6deb41fe2861f74d87 419660 java optional 
libxstream-java_1.4.9.orig.tar.xz
 8e8386e823bf938d034334275c18144a 6232 java optional 
libxstream-java_1.4.9-1.debian.tar.xz
 442e2b05d0c401f70c0f2032676da156 499872 java optional 
libxstream-java_1.4.9-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBCAAGBQJW+l73AAoJEPUTxBnkudCsCVUP/03hGK1opaaLdbhgrMK41rFx
O+HJk792poaRyXiOk8EQ1kM4YOeOacseLOq/YBEfCOAys2uSH6gi3GYydfINV7wM
BOkBXGDUjas2PREl1nEXbORV+NQqsK9CfBvBa3TRcDosTiZ7EGP7HRTigYSJ/a2s
2onFr+b2g+7YhEU97Sn7sj1zLh5XOD7FdNenHSbQUlS/++FSmqCfIezdbzyPinsS
RkP4oXtiglt6sTdj+vvvIiG3TfyoDhMn/QXu56WAfunOdG8JKSS5kk/YKh3jnG1c
8OxmwSZgrSJz4nqSiz81jA/lT43P1kx3CnKlAqmVjh9p4BCi3W81giOs21lH1D2s
7/SFniF+nSc/H/wqwhSKE6dEMiHMFxEAHe4juI3LVBmHRkdW49FboHDCWvYw0Vxu
aqMVl2ehT6hamv4rTdCToLhgKtummrberPCqrmmfRLq0jT7ZLUHEcay9stqA7ckY
gFQSoVCyRLnEDi/Mpdayj8Nxri4MpLeBDy7slCEjLfdWZBVSplpjRlXZbRiz4ec9
exEndrZCI4vwLkQcM1BIEDmqp4VabtIYc8sX7n1tg6NwVh592ftDtwjypLXSm+KV
iTmrfcgmBJ1NQ4A9hVS2Wo3E8+3JvhWfHotwGcPOhQ4L1Fz5W+TrItx2Q8QoHDGn
lNuuu13EmnnlwZWUBAW/
=QWIL
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: fixed 770780 in 1.4.7-1

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> fixed 770780 1.4.7-1
Bug #770780 [libxstream-java] Apache ActiveMQ Packaged with Old XStream Library
Marked as fixed in versions libxstream-java/1.4.7-1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
770780: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770780
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: notfixed 800780 in 1.5.24-1, notfixed 814631 in 1:1.7.8-1, notfound 816075 in 3.2.1-1 ...

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> # unconfuse bts
> notfixed 800780 1.5.24-1
Bug #800780 {Done: "Matteo F. Vescovi" } [mutt] mutt: 
folder-hook: current mailbox shortcut '^' is unset
No longer marked as fixed in versions 1.5.24-1.
> notfixed 814631 1:1.7.8-1
Bug #814631 {Done: Steven Chamberlain } 
[src:xserver-xorg-video-siliconmotion] xserver-xorg-video-siliconmotion: FTBFS: 
src/smi.h:224:5: error: unknown type name 'IOADDRESS'
No longer marked as fixed in versions 1:1.7.8-1.
> notfound 816075 3.2.1-1
Bug #816075 {Done: Antonio Terceiro } [redmine] redmine: 
dependency on ruby-bundler instead of bundler?
Bug #819057 {Done: Antonio Terceiro } [redmine] redmine: 
dependency on ruby-bundler instead of bundler?
No longer marked as found in versions redmine/3.2.1-1.
No longer marked as found in versions redmine/3.2.1-1.
> found 819471 1.0.0~dfsg1-3
Bug #819471 [zaz,zaz-data] zaz-data and zaz: error when trying to install 
together
Marked as found in versions zaz/1.0.0~dfsg1-3.
> found 819404 0.36-2
Bug #819404 [src:libnagios-plugin-perl] libnagios-plugin-perl: should not be 
released in Stretch
Marked as found in versions libnagios-plugin-perl/0.36-2.
> found 819259 7.0.68-1
Bug #819259 [src:tomcat7] Don't include in stretch
Marked as found in versions tomcat7/7.0.68-1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
800780: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=800780
814631: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814631
816075: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816075
819057: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819057
819259: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819259
819404: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819404
819471: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819471
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.