Bug#725471: cglib: FTBFS using locally rebuilt packages
Hi Daniel, I haven't been able to reproduce this error. Do you know what Java packages were installed in the local repository? Did you build them on sid or wheezy? Emmanuel Bourg __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738583: libcglib-java - Uses jarjar without proper copyright or Built-Using
I prepared an update of the cglib package on alioth: - The Built-Using field has been added - debian/copyright now mentions the inclusion of the asm classes - the asm license file is now included in cglib-nodep.jar like the jar distributed by upstream Tony, could you please upload this update if you think it addresses this issue properly? Thank you. Emmanuel Bourg __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Processing of gluegen2_2.1.4-1_amd64.changes
gluegen2_2.1.4-1_amd64.changes uploaded successfully to ftp-master.debian.org along with the files: gluegen2_2.1.4-1.dsc gluegen2_2.1.4.orig.tar.bz2 gluegen2_2.1.4-1.debian.tar.xz libgluegen2-rt-java_2.1.4-1_all.deb libgluegen2-build-java_2.1.4-1_all.deb libgluegen2-doc_2.1.4-1_all.deb libgluegen2-jni_2.1.4-1_amd64.deb Greetings, Your Debian queue daemon (running on host ravel.debian.org) __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Processing of gluegen2_2.1.4-1_amd64.changes
gluegen2_2.1.4-1_amd64.changes uploaded successfully to localhost along with the files: gluegen2_2.1.4-1.dsc gluegen2_2.1.4.orig.tar.bz2 gluegen2_2.1.4-1.debian.tar.xz libgluegen2-rt-java_2.1.4-1_all.deb libgluegen2-build-java_2.1.4-1_all.deb libgluegen2-doc_2.1.4-1_all.deb libgluegen2-jni_2.1.4-1_amd64.deb Greetings, Your Debian queue daemon (running on host franck.debian.org) __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738579: libsisu-guice-java - $DebuggingClassWriter overrides final method visit
The cause of the problem is described here [0]. I tried it out and downgraded asm dependency to 3.3.2 in d/maven.rules. After reverting core/src/com/google/inject/internal/util/LineNumbers.java to previous revision (it seems to be the only class depending on asm-4 functionality), I was able to build both sisu-guice and maven. Would that kind of solution be acceptable? [0] http://www.matt-reid.co.uk/blog_post.php?id=83 __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738579: libsisu-guice-java - $DebuggingClassWriter overrides final method visit
On 02/11/2014 06:39 AM, Eugene Zhukov wrote: The cause of the problem is described here [0]. I tried it out and downgraded asm dependency to 3.3.2 in d/maven.rules. After reverting core/src/com/google/inject/internal/util/LineNumbers.java to previous revision (it seems to be the only class depending on asm-4 functionality), I was able to build both sisu-guice and maven. Would that kind of solution be acceptable? [0] http://www.matt-reid.co.uk/blog_post.php?id=83 Hi Eugene, I need to take a look at the difference in LineNumbers.java in more detail, but this sounds like an acceptable solution. Would you have time to add a patch that reverts LineNumbers.java and update maven.rules in the master branch? Thank you, tony signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738579: libsisu-guice-java - $DebuggingClassWriter overrides final method visit
On Tue, Feb 11, 2014 at 4:56 PM, tony mancill tmanc...@debian.org wrote: On 02/11/2014 06:39 AM, Eugene Zhukov wrote: The cause of the problem is described here [0]. I tried it out and downgraded asm dependency to 3.3.2 in d/maven.rules. After reverting core/src/com/google/inject/internal/util/LineNumbers.java to previous revision (it seems to be the only class depending on asm-4 functionality), I was able to build both sisu-guice and maven. Would that kind of solution be acceptable? [0] http://www.matt-reid.co.uk/blog_post.php?id=83 Hi Eugene, I need to take a look at the difference in LineNumbers.java in more detail, but this sounds like an acceptable solution. Would you have time to add a patch that reverts LineNumbers.java and update maven.rules in the master branch? Sure, I just pushed my changes to master, please have a look. Eugene __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
gluegen2_2.1.4-1_amd64.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 11 Feb 2014 15:05:50 +0100 Source: gluegen2 Binary: libgluegen2-rt-java libgluegen2-build-java libgluegen2-jni libgluegen2-doc Architecture: source all amd64 Version: 2.1.4-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers pkg-java-maintainers@lists.alioth.debian.org Changed-By: Sylvestre Ledru sylves...@debian.org Description: libgluegen2-build-java - Tool to automatically generate the Java and JNI code. libgluegen2-doc - Tool to automatically generate the Java and JNI code. libgluegen2-jni - Tool to automatically generate the Java and JNI code. libgluegen2-rt-java - Tool to automatically generate the Java and JNI code. Changes: gluegen2 (2.1.4-1) unstable; urgency=medium . * New upstream release Checksums-Sha1: faea97ffe10e80984cdb20cd7fe7119cd6dad81a 2176 gluegen2_2.1.4-1.dsc 1777e276f405efe72f14c63f493305cf0a4d389f 411129 gluegen2_2.1.4.orig.tar.bz2 8376ed358e34c16b44769784a0fb0129866e5388 13780 gluegen2_2.1.4-1.debian.tar.xz 5d637536614fe5beefbb19fec7864b03a5c9fdaa 251090 libgluegen2-rt-java_2.1.4-1_all.deb 094b17765126810b053a8d114fc9d6a03bfee749 974750 libgluegen2-build-java_2.1.4-1_all.deb e18dae206051a0e781ef9d680ed36ab56a8c9fdb 287048 libgluegen2-doc_2.1.4-1_all.deb 85659419a6362b0e4d8e85306345d48363c65183 8170 libgluegen2-jni_2.1.4-1_amd64.deb Checksums-Sha256: 663ee285f0bd22c093b629cbab262564f4fbffcf14bc9ed58ffeac5af3cd2385 2176 gluegen2_2.1.4-1.dsc d3fecfa51966eb02115a542f9265c1bbec4b8adcd672dd74d202907f4639b5e3 411129 gluegen2_2.1.4.orig.tar.bz2 7ec32afda3c3c1d9e42d21d292db8be74949b62b02be34f9740487f4d824f28d 13780 gluegen2_2.1.4-1.debian.tar.xz 259b07f0195dd8e4fcd038b8e32f88c5db8191c8f0d973b6277033683dad9a5b 251090 libgluegen2-rt-java_2.1.4-1_all.deb a60194a51563e5e01ae63668deede8976f272644f35d9834040a5db9216e1179 974750 libgluegen2-build-java_2.1.4-1_all.deb 3b38bab07a2f3767de651d8d48644c658709488565ba9109db889c30595f9b32 287048 libgluegen2-doc_2.1.4-1_all.deb e5281058c779a65a9a3317b85d1fb4eae1d870917b7b2b5e3a7a23169633148c 8170 libgluegen2-jni_2.1.4-1_amd64.deb Files: c7c14dc377c31fc1bcebd0ac47a1aa0b 2176 java optional gluegen2_2.1.4-1.dsc a9485ebe9f95ee50d5247def699862c4 411129 java optional gluegen2_2.1.4.orig.tar.bz2 29ed802f162a8191ce2d0efd555d7d39 13780 java optional gluegen2_2.1.4-1.debian.tar.xz 3e6d05c34d18b852889d1e33bb6d2bde 251090 java optional libgluegen2-rt-java_2.1.4-1_all.deb da0e24a546cca0c5b6f0e86b85408c38 974750 java optional libgluegen2-build-java_2.1.4-1_all.deb bd53e8fb6814521d5aba4d0e523cb2f9 287048 doc optional libgluegen2-doc_2.1.4-1_all.deb 3085be86826af183a2d0aca172144fbe 8170 java optional libgluegen2-jni_2.1.4-1_amd64.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCAAGBQJS+i/OAAoJEH5lKNp1LxvhwE0P/jAp4mCdzJ/jes7hTCVKiUsh PU8z7KAyaSgm4xFXLJczu3n+FtieM6Md83QETe2z9BdiVAO69366BKtWet60HJL2 IBEoSlyN0QUD6kAsM97eSn/bqaOuwxDkSJL/HccZnvtsS8xxdVgU6Z5zH3KYkO5u RSBSl1SHFDAG8d1lbVsXsZnD/tCl00uRcQHitX81D5uvX9TleM3AOme40AcX4WnZ lcdcpJ/EnfNP2xFtat9W+D7mVXNtRjkloFpGVKJyBsc0+mPHyBbPwTLpPJE3Q/h2 n3kGqasANUmI0FBl6wdOHs6I+AQcRmqEuvIjMcbHk7drgYoPzMyaf8HWPKzcnTap z/Zh5od6hWKOq0rZs2w2aNdFpi26N6396VFzmbGs63aakbt0ZzMC0B3uL06ujAYo eEUSyHs+Y7XQVWZ7b8hJwSHDCBva5ccgkODT5L+RCq29uI93YEVvdfSYanAHM1Mf AEHuM9rHMQ0sLeDzbmyAhp2rl+YViBdgMuQw9n8Y1OpmANV6dfOwqRGaa3eB4GbP XvW5B7is5QGYd56MEiMjxK1HwkaHkA9fvqM+JCzCWOqSrIs8u5ijzGzYQbtLYsAZ qYuY2EbyMLYIwouSvUQnJ28jktp8sdVI0Zq2qNqIM5RL412uZKJRyal1BA2YhVfC vMWu2XgjQXCrlFKLMzmI =/d3O -END PGP SIGNATURE- Thank you for your contribution to Debian. __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738583: libcglib-java - Uses jarjar without proper copyright or Built-Using
On Tue, Feb 11, 2014 at 08:10:28AM +0100, Emmanuel Bourg wrote: Le 11/02/2014 05:16, tony mancill a écrit : Instead of Built-Using or updating debian/copyright, it seems preferable to refactor the source to use the actual libasm3-java JAR, although I haven't yet looked into how much effort that will require. Please don't depend on asm3 at runtime. jarjar is used to relocate the asm classes under a different package. This is necessary to avoid classpath conflicts between different versions of asm. Have you talked to the security team about this? Where does Debian ship different versions of asm? Bastian -- What kind of love is that? Not to be loved; never to have shown love. -- Commissioner Nancy Hedford, Metamorphosis, stardate 3219.8 __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738583: libcglib-java - Uses jarjar without proper copyright or Built-Using
Le 11/02/2014 21:22, Bastian Blank a écrit : Have you talked to the security team about this? Where does Debian ship different versions of asm? Debian has four versions of asm. Each version is incompatible with the previous one, and they share the same namespace (org.objectweb.asm.*). That means two versions can't coexist safely in the same classpath, this is guaranteed to break at runtime. That's why widely used libraries like cglib relocate the asm classes under a different namespace to avoid conflicts (net.sf.cglib.asm.*). I'm not sure to see why the security team would care about this though. Emmanuel Bourg __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738610: maven: Can't run mvn due to some bad java library dependency
Package: maven Version: 3.0.5-1 Followup-For: Bug #738610 I'm experiencing the same problem since I've upgraded my system's packages last Monday. thanks -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.12-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages maven depends on: ii default-jre [java5-runtime] 2:1.7-51 ii default-jre-headless [java5-runtime-headless]2:1.7-51 ii libaether-java 1.13.1-2 ii libcommons-cli-java 1.2-3 ii libcommons-codec-java1.9-1 ii libcommons-httpclient-java 3.1-10.2 ii libcommons-logging-java 1.1.3-1 ii libguava-java15.0-2 ii libplexus-cipher-java1.5-4 ii libplexus-classworlds2-java 2.5.1-2 ii libplexus-containers1.5-java 1.5.5-6 ii libplexus-interpolation-java 1.19-1 ii libplexus-sec-dispatcher-java1.3.1-6 ii libplexus-utils2-java2.0.5-1 ii libsisu-guice-java 3.1.9+dfsg-1 ii libsisu-ioc-java 2.3.0-4 ii libwagon2-java 2.5-1 ii openjdk-6-jre [java5-runtime]6b30-1.13.1-1 ii openjdk-6-jre-headless [java5-runtime-headless] 6b30-1.13.1-1 ii openjdk-7-jre [java5-runtime]7u51-2.4.5-2 ii openjdk-7-jre-headless [java5-runtime-headless] 7u51-2.4.5-2 maven recommends no packages. maven suggests no packages. -- no debconf information __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Processed: reassign 738610 to libsisu-guice-java
Processing commands for cont...@bugs.debian.org: reassign 738610 libsisu-guice-java Bug #738610 [maven] maven: Can't run mvn due to some bad java library dependency Bug reassigned from package 'maven' to 'libsisu-guice-java'. No longer marked as found in versions maven/3.0.5-1. Ignoring request to alter fixed versions of bug #738610 to the same values previously set thanks Stopping processing here. Please contact me if you need assistance. -- 738610: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738610 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Processing of cglib_2.2.2+dfsg-6_amd64.changes
cglib_2.2.2+dfsg-6_amd64.changes uploaded successfully to localhost along with the files: cglib_2.2.2+dfsg-6.dsc cglib_2.2.2+dfsg-6.debian.tar.xz libcglib-java_2.2.2+dfsg-6_all.deb libcglib-java-doc_2.2.2+dfsg-6_all.deb Greetings, Your Debian queue daemon (running on host franck.debian.org) __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738583: libcglib-java - Uses jarjar without proper copyright or Built-Using
On 02/11/2014 04:29 AM, Emmanuel Bourg wrote: I prepared an update of the cglib package on alioth: - The Built-Using field has been added - debian/copyright now mentions the inclusion of the asm classes - the asm license file is now included in cglib-nodep.jar like the jar distributed by upstream Tony, could you please upload this update if you think it addresses this issue properly? Hi Emmanuel, The attribution looks appropriate to me. I changed the version number to we're not uploading a new upstream source version just to switch to XZ compression. That'll take effect with the next upstream upload (or repack, if that ends up being necessary). Thank you for the update! Uploaded. tony signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
sisu-guice_3.1.9+dfsg-2_amd64.changes REJECTED
libsisu-guice-java_3.1.9+dfsg-2_all.deb: Built-Using refers to non-existing source package libasm3-java (= 3.3.2-2) === Please feel free to respond to this email if you don't understand why your files were rejected, or if you upload new files which address our concerns. __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Re: sisu-guice_3.1.9+dfsg-2_amd64.changes REJECTED
On 2014-02-12 07:33, Debian FTP Masters wrote: libsisu-guice-java_3.1.9+dfsg-2_all.deb: Built-Using refers to non-existing source package libasm3-java (= 3.3.2-2) [...] You have to use source packages (i.e. asm3 instead of libasm3-java) in Built-Using. ~Niels __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Processing of sisu-guice_3.1.9+dfsg-3_amd64.changes
sisu-guice_3.1.9+dfsg-3_amd64.changes uploaded successfully to localhost along with the files: sisu-guice_3.1.9+dfsg-3.dsc sisu-guice_3.1.9+dfsg-3.debian.tar.xz libsisu-guice-java_3.1.9+dfsg-3_all.deb Greetings, Your Debian queue daemon (running on host franck.debian.org) __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Re: sisu-guice_3.1.9+dfsg-2_amd64.changes REJECTED
On 02/11/2014 10:56 PM, Niels Thykier wrote: On 2014-02-12 07:33, Debian FTP Masters wrote: libsisu-guice-java_3.1.9+dfsg-2_all.deb: Built-Using refers to non-existing source package libasm3-java (= 3.3.2-2) [...] You have to use source packages (i.e. asm3 instead of libasm3-java) in Built-Using. ~Niels Thanks Niels. I realized that when I got the bounce and uploaded a new version just a bit ago. It's clear in Policy, but I had binary package on the brain (since jarjar is actually incorporating the binary package). Also, I'm a bit confused as to why my upload of cglib about 30 minutes prior didn't bounce for the same reason. I'm preparing another upload of that now, but it's odd that I didn't get a reject. Thanks, tony signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
sisu-guice_3.1.9+dfsg-3_amd64.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 11 Feb 2014 22:40:19 -0800 Source: sisu-guice Binary: libsisu-guice-java Architecture: source all Version: 3.1.9+dfsg-3 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers pkg-java-maintainers@lists.alioth.debian.org Changed-By: tony mancill tmanc...@debian.org Description: libsisu-guice-java - Patched build of Google Guice for Sisu-IoC Closes: 738579 738580 738610 Changes: sisu-guice (3.1.9+dfsg-3) unstable; urgency=medium . * Team upload. * Fix Built-Using field to reference source package names. . sisu-guice (3.1.9+dfsg-2) unstable; urgency=medium . * Team upload. * Patch core/src/com/google/inject/internal/util/LineNumbers.java to eliminate need for asm4, which conflicts at runtime with asm3. - Thank you to Eugene Zhukov. (Closes: #738579, #738610) * Add Built-Using: field to debian/control to note use of classes from libcglib-java and libasm3-java by the jarjar plugin. Update debian/copyright to provide source attributions for incorporated classes. (Closes: #738580) - Thank you to Bastian Blank for reporting this issue. Checksums-Sha1: e381795fd39a21cc2f3b81a55df8d8245d9f84d4 2450 sisu-guice_3.1.9+dfsg-3.dsc d22f733edf5073097db3e80f38a75b442dc25bca 6464 sisu-guice_3.1.9+dfsg-3.debian.tar.xz 3915cd735c977d2954657319a62f2d924544ba60 574738 libsisu-guice-java_3.1.9+dfsg-3_all.deb Checksums-Sha256: bb070e505293deaa5d4be565be3540fc045db4120a8a1a5bea35768642cbc7ba 2450 sisu-guice_3.1.9+dfsg-3.dsc 48c6dfb94ab97495dd322cecffd1cb37c79b37776edcef18188f82eafa6d9c7f 6464 sisu-guice_3.1.9+dfsg-3.debian.tar.xz 135b54535adb29de376647ad3192e189f4772107997d66405bcfd163a528236b 574738 libsisu-guice-java_3.1.9+dfsg-3_all.deb Files: d0f8341f1b49be6093aeb1e06f03b3c1 2450 java optional sisu-guice_3.1.9+dfsg-3.dsc b65a96d3824b0e59944a4c126d9c0eee 6464 java optional sisu-guice_3.1.9+dfsg-3.debian.tar.xz 9172664ccc6431c4256560f8ce4e4a23 574738 java optional libsisu-guice-java_3.1.9+dfsg-3_all.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCgAGBQJS+xp2AAoJECHSBYmXSz6W5x0QAMU41eVi1NeTKU6M6BdWEfLy UsxZnVGDFzoURCrIZj3fd9IrT3zqRcX/8MnvwAtg/pKdnrSSOxwXW+GYy5tmw0cn b8uec9DMFwFm3J5tBfuufVYOxQWx5RsERFCLxOVQJVM2M+nq4q/mRK/xBOr+417N rcdZHJsLjEo40j+eP3vaI63sQOHGE1oiA0FnMCtRgmoIZgPliTeX9uWf6JMEsZ+P d4S72NwqAURF3H7uHtVmUuUVg7SJ4FWUvsED0f+7weJSInC7wgmgYSuMV2lAd5cP PrrzcJbHH05+p9+u0IWIXr+/HDGEOqf4GftY4nLiku7ZqlONZlprcYox38x87WOd cVmqWN8nyP39YRtS/Z/oADVnIjyOk0PJ3JdrstEHJ+zh0SjFWNWfDkacEfgWj2wN jNF43xF8pCpeoXnplQnSUbtuCVQcPhLwntNRgNwbeA1oyBM4qxa0jnEMJAN1dYkC SHrIX59wnGYr1JWfDE7hdJ5zKY2QdEwbjEgAJmmoFEDDvIy08nao7UCeqNmrwf47 u2rOgsoIbdIP28Sjax5r9r4Z5b+EJC6N+RDd46ez9FWM0EefoeevJNXDOr+OA70K EKlNdJJyxAI5XobQRcNvm9UlOO82kha+AwwbVnWXBtdp2Rj0Psa2LLgkjMBqXQ04 5QWwj9CyBm8BOnZ8IC3b =8e/4 -END PGP SIGNATURE- Thank you for your contribution to Debian. __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738583: libcglib-java - Uses jarjar without proper copyright or Built-Using
Le 12/02/2014 06:31, tony mancill a écrit : The attribution looks appropriate to me. I changed the version number to we're not uploading a new upstream source version just to switch to XZ compression. That'll take effect with the next upstream upload (or repack, if that ends up being necessary). Actually I changed the upstream tarball because it was missing the asm license in the lib directory. That's why I incremented the upstream part of the version. Emmanuel Bourg __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738610: marked as done (maven: Can't run mvn due to some bad java library dependency)
Your message dated Wed, 12 Feb 2014 07:03:38 + with message-id e1wdtr8-te...@franck.debian.org and subject line Bug#738610: fixed in sisu-guice 3.1.9+dfsg-3 has caused the Debian Bug report #738610, regarding maven: Can't run mvn due to some bad java library dependency to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 738610: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738610 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ---BeginMessage--- Package: maven Version: 3.0.5-1 Severity: important Dear Maintainer, After safe-upgrade, running mvn results in the following: lior@meme:/tmp$ mvn --- constituent[0]: file:/usr/share/maven/lib/plexus-cipher.jar constituent[1]: file:/usr/share/maven/lib/maven-artifact-3.x.jar constituent[2]: file:/usr/share/maven/lib/wagon-provider-api.jar constituent[3]: file:/usr/share/maven/lib/plexus-component-annotations.jar constituent[4]: file:/usr/share/maven/lib/maven-settings-3.x.jar constituent[5]: file:/usr/share/maven/lib/maven-settings-builder-3.x.jar constituent[6]: file:/usr/share/maven/lib/plexus-utils.jar constituent[7]: file:/usr/share/maven/lib/commons-logging.jar constituent[8]: file:/usr/share/maven/lib/aether-util.jar constituent[9]: file:/usr/share/maven/lib/plexus-interpolation.jar constituent[10]: file:/usr/share/maven/lib/aether-connector-wagon.jar constituent[11]: file:/usr/share/maven/lib/sisu-inject-plexus.jar constituent[12]: file:/usr/share/maven/lib/wagon-file.jar constituent[13]: file:/usr/share/maven/lib/plexus-sec-dispatcher.jar constituent[14]: file:/usr/share/maven/lib/maven-plugin-api-3.x.jar constituent[15]: file:/usr/share/maven/lib/sisu-guice.jar constituent[16]: file:/usr/share/maven/lib/maven-repository-metadata-3.x.jar constituent[17]: file:/usr/share/maven/lib/maven-model-3.x.jar constituent[18]: file:/usr/share/maven/lib/maven-embedder-3.x.jar constituent[19]: file:/usr/share/maven/lib/maven-model-builder-3.x.jar constituent[20]: file:/usr/share/maven/lib/sisu-inject-bean.jar constituent[21]: file:/usr/share/maven/lib/commons-cli.jar constituent[22]: file:/usr/share/maven/lib/guava.jar constituent[23]: file:/usr/share/maven/lib/commons-codec.jar constituent[24]: file:/usr/share/maven/lib/aether-impl.jar constituent[25]: file:/usr/share/maven/lib/aether-api.jar constituent[26]: file:/usr/share/maven/lib/maven-core-3.x.jar constituent[27]: file:/usr/share/maven/lib/wagon-http-shaded.jar constituent[28]: file:/usr/share/maven/lib/commons-httpclient.jar constituent[29]: file:/usr/share/maven/lib/maven-aether-provider-3.x.jar constituent[30]: file:/usr/share/maven/lib/aether-spi.jar constituent[31]: file:/usr/share/maven/lib/maven-compat-3.x.jar --- Exception in thread main com.google.common.util.concurrent.ExecutionError: java.lang.VerifyError: class com.google.inject.internal.cglib.core.$DebuggingClassWriter overrides final method visit.(IILjava/lang/String;Ljava/lang/String;Ljava/lang/String;[Ljava/lang/String;)V at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2197) at com.google.common.cache.LocalCache.get(LocalCache.java:3932) at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:3936) at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4806) at com.google.common.cache.LocalCache$LocalLoadingCache.getUnchecked(LocalCache.java:4812) at com.google.inject.internal.FailableCache.get(FailableCache.java:48) at com.google.inject.internal.ConstructorInjectorStore.get(ConstructorInjectorStore.java:50) at com.google.inject.internal.ConstructorBindingImpl.initialize(ConstructorBindingImpl.java:139) at com.google.inject.internal.InjectorImpl.initializeBinding(InjectorImpl.java:532) at com.google.inject.internal.AbstractBindingProcessor$Processor$1.run(AbstractBindingProcessor.java:180) at com.google.inject.internal.ProcessedBindingData.initializeBindings(ProcessedBindingData.java:44) at com.google.inject.internal.InternalInjectorCreator.initializeStatically(InternalInjectorCreator.java:123) at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:107) at com.google.inject.Guice.createInjector(Guice.java:96) at com.google.inject.Guice.createInjector(Guice.java:73) at com.google.inject.Guice.createInjector(Guice.java:62) at org.codehaus.plexus.DefaultPlexusContainer.addPlexusInjector(DefaultPlexusContainer.java:470)
Bug#738580: marked as done (libsisu-guice-java - Incorporates other binaries without Built-Using)
Your message dated Wed, 12 Feb 2014 07:03:38 + with message-id e1wdtr8-tx...@franck.debian.org and subject line Bug#738580: fixed in sisu-guice 3.1.9+dfsg-3 has caused the Debian Bug report #738580, regarding libsisu-guice-java - Incorporates other binaries without Built-Using to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 738580: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738580 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ---BeginMessage--- Package: libsisu-guice-java Version: 3.1.9+dfsg-1 Severity: serious libsisu-guice-java incorporates external binaries (libcglib-java for example) without reason and even lacks the Built-Using field. Also this means the copyright file in the resulting binary is wrong, it does not list the incorporated stuff. Bastian -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 3.12-1-686-pae (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash ---End Message--- ---BeginMessage--- Source: sisu-guice Source-Version: 3.1.9+dfsg-3 We believe that the bug you reported is fixed in the latest version of sisu-guice, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 738...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. tony mancill tmanc...@debian.org (supplier of updated sisu-guice package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 11 Feb 2014 22:40:19 -0800 Source: sisu-guice Binary: libsisu-guice-java Architecture: source all Version: 3.1.9+dfsg-3 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers pkg-java-maintainers@lists.alioth.debian.org Changed-By: tony mancill tmanc...@debian.org Description: libsisu-guice-java - Patched build of Google Guice for Sisu-IoC Closes: 738579 738580 738610 Changes: sisu-guice (3.1.9+dfsg-3) unstable; urgency=medium . * Team upload. * Fix Built-Using field to reference source package names. . sisu-guice (3.1.9+dfsg-2) unstable; urgency=medium . * Team upload. * Patch core/src/com/google/inject/internal/util/LineNumbers.java to eliminate need for asm4, which conflicts at runtime with asm3. - Thank you to Eugene Zhukov. (Closes: #738579, #738610) * Add Built-Using: field to debian/control to note use of classes from libcglib-java and libasm3-java by the jarjar plugin. Update debian/copyright to provide source attributions for incorporated classes. (Closes: #738580) - Thank you to Bastian Blank for reporting this issue. Checksums-Sha1: e381795fd39a21cc2f3b81a55df8d8245d9f84d4 2450 sisu-guice_3.1.9+dfsg-3.dsc d22f733edf5073097db3e80f38a75b442dc25bca 6464 sisu-guice_3.1.9+dfsg-3.debian.tar.xz 3915cd735c977d2954657319a62f2d924544ba60 574738 libsisu-guice-java_3.1.9+dfsg-3_all.deb Checksums-Sha256: bb070e505293deaa5d4be565be3540fc045db4120a8a1a5bea35768642cbc7ba 2450 sisu-guice_3.1.9+dfsg-3.dsc 48c6dfb94ab97495dd322cecffd1cb37c79b37776edcef18188f82eafa6d9c7f 6464 sisu-guice_3.1.9+dfsg-3.debian.tar.xz 135b54535adb29de376647ad3192e189f4772107997d66405bcfd163a528236b 574738 libsisu-guice-java_3.1.9+dfsg-3_all.deb Files: d0f8341f1b49be6093aeb1e06f03b3c1 2450 java optional sisu-guice_3.1.9+dfsg-3.dsc b65a96d3824b0e59944a4c126d9c0eee 6464 java optional sisu-guice_3.1.9+dfsg-3.debian.tar.xz 9172664ccc6431c4256560f8ce4e4a23 574738 java optional libsisu-guice-java_3.1.9+dfsg-3_all.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCgAGBQJS+xp2AAoJECHSBYmXSz6W5x0QAMU41eVi1NeTKU6M6BdWEfLy UsxZnVGDFzoURCrIZj3fd9IrT3zqRcX/8MnvwAtg/pKdnrSSOxwXW+GYy5tmw0cn b8uec9DMFwFm3J5tBfuufVYOxQWx5RsERFCLxOVQJVM2M+nq4q/mRK/xBOr+417N rcdZHJsLjEo40j+eP3vaI63sQOHGE1oiA0FnMCtRgmoIZgPliTeX9uWf6JMEsZ+P d4S72NwqAURF3H7uHtVmUuUVg7SJ4FWUvsED0f+7weJSInC7wgmgYSuMV2lAd5cP PrrzcJbHH05+p9+u0IWIXr+/HDGEOqf4GftY4nLiku7ZqlONZlprcYox38x87WOd cVmqWN8nyP39YRtS/Z/oADVnIjyOk0PJ3JdrstEHJ+zh0SjFWNWfDkacEfgWj2wN jNF43xF8pCpeoXnplQnSUbtuCVQcPhLwntNRgNwbeA1oyBM4qxa0jnEMJAN1dYkC
Bug#738583: libcglib-java - Uses jarjar without proper copyright or Built-Using
On 02/11/2014 10:58 PM, Emmanuel Bourg wrote: Le 12/02/2014 06:31, tony mancill a écrit : The attribution looks appropriate to me. I changed the version number to we're not uploading a new upstream source version just to switch to XZ compression. That'll take effect with the next upstream upload (or repack, if that ends up being necessary). Actually I changed the upstream tarball because it was missing the asm license in the lib directory. That's why I incremented the upstream part of the version. Okay, I missed that. I have to re-upload anyway, since the Built-Using field must specify the source package - that is, asm3 and not libasm3-java. I'll use the repackaged source tarball for that. Thank you, tony signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Processing of cglib_2.2.2+dfsg2-1_amd64.changes
cglib_2.2.2+dfsg2-1_amd64.changes uploaded successfully to localhost along with the files: cglib_2.2.2+dfsg2-1.dsc cglib_2.2.2+dfsg2.orig.tar.xz cglib_2.2.2+dfsg2-1.debian.tar.xz libcglib-java_2.2.2+dfsg2-1_all.deb libcglib-java-doc_2.2.2+dfsg2-1_all.deb Greetings, Your Debian queue daemon (running on host franck.debian.org) __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
cglib_2.2.2+dfsg2-1_amd64.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 11 Feb 2014 23:05:31 -0800 Source: cglib Binary: libcglib-java libcglib-java-doc Architecture: source all Version: 2.2.2+dfsg2-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers pkg-java-maintainers@lists.alioth.debian.org Changed-By: tony mancill tmanc...@debian.org Description: libcglib-java - code generation library for Java libcglib-java-doc - code generation library for Java - documentation Closes: 738583 Changes: cglib (2.2.2+dfsg2-1) unstable; urgency=medium . * Team upload. * Update Built-Using to refer to the asm3 source package. * Correctly bump the upstream version to incorporate the repack that includes the missing asm licence file referenced in the previous upload. . cglib (2.2.2+dfsg-6) unstable; urgency=medium . * Team upload. * Proper copyright attribution for asm (Closes: #738583) - Built-Using: libasm3-java added to debian/control - Missing asm license file added to cglib-nodep.jar - Note added to debian/copyright to mention the inclusion of asm * debian/control: - Use canonical URLs for the Vcs-* fields - Standards-Version updated to 3.9.5 (no changes) * Switch to debhelper level 9 * debian/rules: Add a clean target to allow rebuilds * debian/copyright: Fixed a typo * debian/watch: Match only the 2.x releases (cglib 3 is packaged in libcglib3-java) * Use XZ compression for the upstream tarball (will take effect for the next upstream version) Checksums-Sha1: f9ac2e347ff97da23bdacf302f31bcd179a9565e 2113 cglib_2.2.2+dfsg2-1.dsc b4f32553c75fdc5d538cf7e8806cd51c7404b203 99112 cglib_2.2.2+dfsg2.orig.tar.xz dc1b921140ce36def181eb2de46d7272a202eeea 6568 cglib_2.2.2+dfsg2-1.debian.tar.xz b18b2cdf0a4037ac1bc845e279b199177f00dac6 696278 libcglib-java_2.2.2+dfsg2-1_all.deb d8f56255c0e541d612f57126e793321a32317248 106390 libcglib-java-doc_2.2.2+dfsg2-1_all.deb Checksums-Sha256: 2331a035f28dd2f72bfff280b2669f5316fb7aa759c8fbced85c7d0ad7a37f5d 2113 cglib_2.2.2+dfsg2-1.dsc adbb14fc7ed2be5939b8895ace0e900b6e1948f034ded1b1cfb629645cec29e6 99112 cglib_2.2.2+dfsg2.orig.tar.xz cdde2b03ed5e0e954015bc41ad6787f829845831a698699d86b4a87b87f4a1a7 6568 cglib_2.2.2+dfsg2-1.debian.tar.xz fc59ebd79be1432d5d3b47e3b5033c2b7995dea7719d6f2df832b0f22779c232 696278 libcglib-java_2.2.2+dfsg2-1_all.deb 9ebe623a401fb56391a46dc2daf30d55b12212c7a8c556e90e3600ec06f628f0 106390 libcglib-java-doc_2.2.2+dfsg2-1_all.deb Files: 6557bb08fd7c65b04f6fc0d5ab38c86f 2113 java optional cglib_2.2.2+dfsg2-1.dsc a640af5ac2ca209c06c9aef5800605d6 99112 java optional cglib_2.2.2+dfsg2.orig.tar.xz c3a37915a0a5b9a2d27dbd9961020ae6 6568 java optional cglib_2.2.2+dfsg2-1.debian.tar.xz 6c8ef070602c82cd13fc5d12bf4b4c64 696278 java optional libcglib-java_2.2.2+dfsg2-1_all.deb 1ae455871a86a2c53f08bc78ead43c3f 106390 doc optional libcglib-java-doc_2.2.2+dfsg2-1_all.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCgAGBQJS+yCkAAoJECHSBYmXSz6WzDUP/1SZoUzLel9LEVII9ojDqzxz TU1SlsJDtftM9Qzkmbn458MZslN29yoUfEYg6kE6IMhInnT4LJxJxnNkJFL8EtTf VNygth7uaf0gckreLBlu9PoraM3UZivSk7oOC31oXd02DaP4D1/UpyRDS419Z7Og Aqaozt4nNGu4oDFfmSS5iQqkcXpJGDM1sijMD0VklmotS41FrHB17W/SGKvKwXy2 9MkE3Y0mBTLSa5vaLZMYDmp3GNmda8FYcqPppN9Olk11bDB4tISU2+MD16Ch6Nt7 Q6btgPLhhtycVX/OLBxtE0qrYIa2IQqh4URoapSOo5+3YZcyXNDVE6i4Mt64NF6m biReYl82QtHgYN9WBnTuXXovMVLhiGC9HMdPQ1cD75vmwxl84aXmZ/KbpotHainx pAu/i94opqkfmig2OxAy80bxHJDLK9TRgrG3a3gDTQlQ9MZmJZ8+wU1lHMHCcpo6 wKKmC1+wl8xFMoTtGN2Df8Cq1JEmCRG2NAL8o/v6Q15sJzBQpAxy5cc7LTR6832A 9JByTn3Q5v73Z2FleZ01ueEMTnodHkuYonDrz/atzwHxCUqxQWyYZye5xVv52ZfF MZ6Day/bIusXRo6vXZvZyjh0OgThVe4PhWGmrcnCe9JGR1fN2qOsgTW5jXVBcMAN cDe/CnCG3GGfNt2ZJPFA =e0zn -END PGP SIGNATURE- Thank you for your contribution to Debian. __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. Please use debian-j...@lists.debian.org for discussions and questions.
Bug#738583: marked as done (libcglib-java - Uses jarjar without proper copyright or Built-Using)
Your message dated Wed, 12 Feb 2014 07:33:21 + with message-id e1wdujt-0004cr...@franck.debian.org and subject line Bug#738583: fixed in cglib 2.2.2+dfsg2-1 has caused the Debian Bug report #738583, regarding libcglib-java - Uses jarjar without proper copyright or Built-Using to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 738583: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738583 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ---BeginMessage--- Package: libcglib-java Version: 2.2.2+dfsg-5 Severity: serious libcglib-java uses jarjar to incoporate libasm3-java. It does this without mentioning the license of the incorporated stuff or even listing it as Built-Using. Bastian -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 3.12-1-686-pae (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash ---End Message--- ---BeginMessage--- Source: cglib Source-Version: 2.2.2+dfsg2-1 We believe that the bug you reported is fixed in the latest version of cglib, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 738...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. tony mancill tmanc...@debian.org (supplier of updated cglib package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 11 Feb 2014 23:05:31 -0800 Source: cglib Binary: libcglib-java libcglib-java-doc Architecture: source all Version: 2.2.2+dfsg2-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers pkg-java-maintainers@lists.alioth.debian.org Changed-By: tony mancill tmanc...@debian.org Description: libcglib-java - code generation library for Java libcglib-java-doc - code generation library for Java - documentation Closes: 738583 Changes: cglib (2.2.2+dfsg2-1) unstable; urgency=medium . * Team upload. * Update Built-Using to refer to the asm3 source package. * Correctly bump the upstream version to incorporate the repack that includes the missing asm licence file referenced in the previous upload. . cglib (2.2.2+dfsg-6) unstable; urgency=medium . * Team upload. * Proper copyright attribution for asm (Closes: #738583) - Built-Using: libasm3-java added to debian/control - Missing asm license file added to cglib-nodep.jar - Note added to debian/copyright to mention the inclusion of asm * debian/control: - Use canonical URLs for the Vcs-* fields - Standards-Version updated to 3.9.5 (no changes) * Switch to debhelper level 9 * debian/rules: Add a clean target to allow rebuilds * debian/copyright: Fixed a typo * debian/watch: Match only the 2.x releases (cglib 3 is packaged in libcglib3-java) * Use XZ compression for the upstream tarball (will take effect for the next upstream version) Checksums-Sha1: f9ac2e347ff97da23bdacf302f31bcd179a9565e 2113 cglib_2.2.2+dfsg2-1.dsc b4f32553c75fdc5d538cf7e8806cd51c7404b203 99112 cglib_2.2.2+dfsg2.orig.tar.xz dc1b921140ce36def181eb2de46d7272a202eeea 6568 cglib_2.2.2+dfsg2-1.debian.tar.xz b18b2cdf0a4037ac1bc845e279b199177f00dac6 696278 libcglib-java_2.2.2+dfsg2-1_all.deb d8f56255c0e541d612f57126e793321a32317248 106390 libcglib-java-doc_2.2.2+dfsg2-1_all.deb Checksums-Sha256: 2331a035f28dd2f72bfff280b2669f5316fb7aa759c8fbced85c7d0ad7a37f5d 2113 cglib_2.2.2+dfsg2-1.dsc adbb14fc7ed2be5939b8895ace0e900b6e1948f034ded1b1cfb629645cec29e6 99112 cglib_2.2.2+dfsg2.orig.tar.xz cdde2b03ed5e0e954015bc41ad6787f829845831a698699d86b4a87b87f4a1a7 6568 cglib_2.2.2+dfsg2-1.debian.tar.xz fc59ebd79be1432d5d3b47e3b5033c2b7995dea7719d6f2df832b0f22779c232 696278 libcglib-java_2.2.2+dfsg2-1_all.deb 9ebe623a401fb56391a46dc2daf30d55b12212c7a8c556e90e3600ec06f628f0 106390 libcglib-java-doc_2.2.2+dfsg2-1_all.deb Files: 6557bb08fd7c65b04f6fc0d5ab38c86f 2113 java optional cglib_2.2.2+dfsg2-1.dsc a640af5ac2ca209c06c9aef5800605d6 99112 java optional cglib_2.2.2+dfsg2.orig.tar.xz c3a37915a0a5b9a2d27dbd9961020ae6 6568 java optional
