reproducible.debian.net status changes for gant

[Reproducible builds folks]

2016-09-09 20:29 
https://tests.reproducible-builds.org/debian/unstable/amd64/gant changed from 
FTBFS -> reproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

reproducible.debian.net status changes for jboss-logmanager

[Reproducible builds folks]

2016-09-09 08:39 
https://tests.reproducible-builds.org/debian/unstable/amd64/jboss-logmanager 
changed from reproducible -> unreproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

reproducible.debian.net status changes for xmlgraphics-commons

[Reproducible builds folks]

2016-09-09 12:29 
https://tests.reproducible-builds.org/debian/unstable/amd64/xmlgraphics-commons 
changed from FTBFS -> unreproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

resteasy_3.0.19-1_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 09 Sep 2016 22:24:31 +0200
Source: resteasy
Binary: libresteasy-java
Architecture: source all
Version: 3.0.19-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libresteasy-java - RESTEasy -- Framework for RESTful Web services and Java 
applicati
Changes:
 resteasy (3.0.19-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
Checksums-Sha1:
 cd17e541ae981bf37f06913e021b168019c5fe8f 2299 resteasy_3.0.19-1.dsc
 39baedee735aae42089330ecffab0e794a29295f 1916424 resteasy_3.0.19.orig.tar.xz
 16e52f03bde960b1db8b2d46fd8669174410e5c8 6368 resteasy_3.0.19-1.debian.tar.xz
 c9150cdd9102aa31065db93be82d63e7be34bcda 1062866 
libresteasy-java_3.0.19-1_all.deb
Checksums-Sha256:
 17ab1aebd49d9dbcfdec68ff6a475c4d6c74c5d9760ac248c119228413cfc771 2299 
resteasy_3.0.19-1.dsc
 162d711c0fe6fb4e7e4a7b15b110e827548fe969c83192d71ba17492b513 1916424 
resteasy_3.0.19.orig.tar.xz
 e417eadb72a5f1d75fe66ce22686c45320e955b122d6b0c739c3ebf0ffad0756 6368 
resteasy_3.0.19-1.debian.tar.xz
 06cbf987a7a9053e3e79061a3d661238aee8e2501d4a7d988837a51dbbf71a45 1062866 
libresteasy-java_3.0.19-1_all.deb
Files:
 e4273232cc522e7a205e7e5d1e768200 2299 java optional resteasy_3.0.19-1.dsc
 e5b36e1ea7c32a0ce7c934a9752f24b4 1916424 java optional 
resteasy_3.0.19.orig.tar.xz
 a63c8afb3967dd7ca349c3ae706cf914 6368 java optional 
resteasy_3.0.19-1.debian.tar.xz
 c6a49c1af56401525b3dca4fd3b69e9b 1062866 java optional 
libresteasy-java_3.0.19-1_all.deb

-BEGIN PGP SIGNATURE-
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=8LMR
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

bouncycastle_1.55-1_amd64.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 09 Sep 2016 23:14:59 +0200
Source: bouncycastle
Binary: libbcprov-java libbcprov-java-doc libbcmail-java libbcmail-java-doc 
libbcpkix-java libbcpkix-java-doc libbcpg-java libbcpg-java-doc
Architecture: source all
Version: 1.55-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libbcmail-java - Bouncy Castle generators/processors for S/MIME and CMS
 libbcmail-java-doc - Bouncy Castle generators/processors for S/MIME and CMS 
(Documenta
 libbcpg-java - Bouncy Castle generators/processors for OpenPGP
 libbcpg-java-doc - Bouncy Castle generators/processors for OpenPGP 
(Documentation)
 libbcpkix-java - Bouncy Castle Java API for PKIX, CMS, EAC, TSP, PKCS, OCSP, 
CMP,
 libbcpkix-java-doc - Bouncy Castle Java API for PKIX, CMS, EAC, TSP, PKCS... 
(Document
 libbcprov-java - Bouncy Castle Java Cryptographic Service Provider
 libbcprov-java-doc - Bouncy Castle Java Cryptographic Service Provider 
(Documentation)
Changes:
 bouncycastle (1.55-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
 - Refreshed the patches
Checksums-Sha1:
 871c2a8385e1f81705017321c5e350be587c200b 2520 bouncycastle_1.55-1.dsc
 b6691d81a3b77ec8a835241cd091c25879e99d8d 10123592 bouncycastle_1.55.orig.tar.xz
 6265646999267668c9718bbe086c6999def071bd 9996 bouncycastle_1.55-1.debian.tar.xz
 f9cc749c36909d0f66b9d9d944f58d9a73549c08 94998 
libbcmail-java-doc_1.55-1_all.deb
 e2da725f4aeceaeb01ef7448139965dd8bdc3e27 125644 libbcmail-java_1.55-1_all.deb
 9c7926a871bac9be917b6efee57efe1c03fcd5b3 183502 libbcpg-java-doc_1.55-1_all.deb
 5408a07f1df8df18feb340bb9ff0a7e755a66257 266844 libbcpg-java_1.55-1_all.deb
 c5e323c024a8f79e3f208bae73c527914b4cc8d8 336300 
libbcpkix-java-doc_1.55-1_all.deb
 1d9dd689592c41ad83a8c3507ff57d84464729c6 563414 libbcpkix-java_1.55-1_all.deb
 ca48127ed5f83fb3d77704ea8c61b0842cb8cc90 1898940 
libbcprov-java-doc_1.55-1_all.deb
 b42e8f80b28cbc533b69f9f8e9523a942a6ddb63 2647158 libbcprov-java_1.55-1_all.deb
Checksums-Sha256:
 1c0a1ec41c9a35de8ca790dd811528110f26c9489c4c27fa2fe50c3629c0278c 2520 
bouncycastle_1.55-1.dsc
 e36cf78f9c554249e0b75f51ebb0096ea2f25c969877a9c62fdbc0628fd8d787 10123592 
bouncycastle_1.55.orig.tar.xz
 a9ad8dae28fc78cc84584e474d78dd866e3bf563485a75e0f69c9608738938b1 9996 
bouncycastle_1.55-1.debian.tar.xz
 53147fbb004c5267cc4c8b0d0271c8e192ba8205c303ba9f9ba3ef8adb9385b8 94998 
libbcmail-java-doc_1.55-1_all.deb
 82639c78627b566f1a16dd7e22aa5c04dee7c4ea1bd32a09fc90d53e2b79549d 125644 
libbcmail-java_1.55-1_all.deb
 7375363cc1c8f525093b1194be07fefe1348ed2e5384af683ae75c0c0c5b8c4e 183502 
libbcpg-java-doc_1.55-1_all.deb
 cda5f518913527db8578ddc8fecebab7f46b5531925b485b94ce61cc94fa73e0 266844 
libbcpg-java_1.55-1_all.deb
 de3e7c12f5279ec913d16d3de694d9eafb2dcead07ad17ab5a00fce273c9135a 336300 
libbcpkix-java-doc_1.55-1_all.deb
 f0d180d803733aa58096ce90b0ea2f6caef48e53e459ff2e973e76da3e00b179 563414 
libbcpkix-java_1.55-1_all.deb
 7f05328e1c8bf59be8a047338747cdcda4029cd8c92695fc85ca7f1ef8407469 1898940 
libbcprov-java-doc_1.55-1_all.deb
 9881f121308d91936fbcbee3b95256113995cb7ff6abffa2a387642fb12cf732 2647158 
libbcprov-java_1.55-1_all.deb
Files:
 e8bf37f3a13c715dadf618b138773e20 2520 java optional bouncycastle_1.55-1.dsc
 d8af3f9c59e2780770f8c07ddf1df8a5 10123592 java optional 
bouncycastle_1.55.orig.tar.xz
 6b794237eb84b394f566004bf74a9448 9996 java optional 
bouncycastle_1.55-1.debian.tar.xz
 626b915f10e735bbc5b3a27f5c8dc92a 94998 doc optional 
libbcmail-java-doc_1.55-1_all.deb
 1c6465397f3bbd323bf955750106bf3e 125644 java optional 
libbcmail-java_1.55-1_all.deb
 c06ec3e17c6f38d40766a54a1d4e3b8e 183502 doc optional 
libbcpg-java-doc_1.55-1_all.deb
 d6583cf492e31aaa540f87e89da24178 266844 java optional 
libbcpg-java_1.55-1_all.deb
 d90fba5002f28ceb10768bfd41ae5404 336300 doc optional 
libbcpkix-java-doc_1.55-1_all.deb
 fb36e41f8f6e74561a71d6d77fb29bda 563414 java optional 
libbcpkix-java_1.55-1_all.deb
 9926439d4f80e4d4e79990893e0af303 1898940 doc optional 
libbcprov-java-doc_1.55-1_all.deb
 ba0f687d93b447968bef73033ad34f34 2647158 java optional 
libbcprov-java_1.55-1_all.deb

-BEGIN PGP SIGNATURE-
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Processing of bouncycastle_1.55-1_amd64.changes

[Debian FTP Masters]

bouncycastle_1.55-1_amd64.changes uploaded successfully to localhost
along with the files:
  bouncycastle_1.55-1.dsc
  bouncycastle_1.55.orig.tar.xz
  bouncycastle_1.55-1.debian.tar.xz
  libbcmail-java-doc_1.55-1_all.deb
  libbcmail-java_1.55-1_all.deb
  libbcpg-java-doc_1.55-1_all.deb
  libbcpg-java_1.55-1_all.deb
  libbcpkix-java-doc_1.55-1_all.deb
  libbcpkix-java_1.55-1_all.deb
  libbcprov-java-doc_1.55-1_all.deb
  libbcprov-java_1.55-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of resteasy_3.0.19-1_amd64.changes

[Debian FTP Masters]

resteasy_3.0.19-1_amd64.changes uploaded successfully to localhost
along with the files:
  resteasy_3.0.19-1.dsc
  resteasy_3.0.19.orig.tar.xz
  resteasy_3.0.19-1.debian.tar.xz
  libresteasy-java_3.0.19-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: found 837170 in 3.0.6-2

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> found 837170 3.0.6-2
Bug #837170 [src:resteasy] CVE-2016-6345 / CVE-2016-6346 / CVE-2016-6347 / 
CVE-2016-6348
Marked as found in versions resteasy/3.0.6-2.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
837170: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837170
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#837170: CVE-2016-6345 / CVE-2016-6346 / CVE-2016-6347 / CVE-2016-6348

[Moritz Muehlenhoff]

Source: resteasy
Severity: important
Tags: security

Red Hat reported a few vulnerabilities in RestEasy, they don't seem to
be fixed in 3.0.19:

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6345
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6346
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6347
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6348

Cheers,
Moritz

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#834682: mina2: FTBFS in testing (failing tests)

[Santiago Vila]

On Thu, 8 Sep 2016, gregor herrmann wrote:

> Logs attached. Unfortunately I don't have any idea on how to fix the
> problem, but if you want me to do something else just shout.

Well, if you don't mind burning a bunch of additional CPU cycles,
I would continue to build it several times until it fails again.

(If you tried three times and it failed once, it seems likely that it
happens again).

Then it would be interesting to see if the test which fails is the
same it failed the first time, which, in your case, was this one:

Failed tests: 
  DatagramBindTest>AbstractBindTest.testUnbindDisconnectsClients:187
expected:<5> but was:<4>

I have not analyzed my build logs, but I guess this is unfortunately
not the same test which fails for me.


BTW: I try to be objective by never reporting something when it only
happens to me. This is why I sometimes say "here is a build log and it
also fails in reproducible builds" or also "here you have several
build logs from several different autobuilders".

I think it would be just fair to ask the maintainer to be objective as
well and consider whether it is really justified to downgrade the
severity of a FTBFS bug when everybody else get a FTBFS too and his
computer is the only one in which it may not be reproduced.

If it is certainly frustrating when one receives a bug which is random
and difficult to reproduce, imagine the frustration of the bug
reporter who sees his report being downgraded or even closed (!)
(see Bug #834964 for a very recent example) when it's quite clear
that the package does not really "build from source".

Thanks a lot.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.