Source: axis
Severity: serious
Tags: sid buster
User: debian-j...@lists.debian.org
Usertags: default-java10
axis fails to build with Java 10 due to the removal of the com.sun.net.ssl API:
./axis/src/org/apache/axis/components/net/SunFakeTrustSocketFactory.java:24:
error: package com.sun.net.ss
Le 02/07/2018 à 14:51, Emmanuel Bourg a écrit :
> axis fails to build with Java 10 due to the removal of the com.sun.net.ssl
> API:
>
>
> ./axis/src/org/apache/axis/components/net/SunFakeTrustSocketFactory.java:24:
> error: package com.sun.net.ssl does no
Control: tag -1 pending
Hello,
Bug #902895 in ant reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/ant/commit/d28ae18aa81495efd9bf33dbcc84838fd586315c
Le 07/07/2018 à 23:16, Sebastiaan Couwenberg a écrit :
> Control: severity -1 serious
>
> jts (1.15.1+ds-1) has been uploaded to unstable.
Hi Sebastiaan, do you think you could provide a patch fixing the reverse
dependencies please?
Emmanuel Bourg
Control: tags -1 + pending
Control: block -1 by 903617 903658 903653 903645 903632 903575 903559
The packaging of AspectJ 1.9 which supports Java 9 and later is ready in
the Git repository on Salsa. New Eclipse packages are required before
uploading though.
Control: reassign -1 libsimple-xml-java
Control: affects -1 carrotsearch-randomizedtesting
Control: retitle -1 libsimple-xml-java: Missing dependency on libstax-java
This is an issue with libsimple-xml-java which has a pom depending on
stax-api but the package doesn't depend on libstax-java. It we
> [ERROR] Failed to execute goal on project bookkeeper-server: Could not
> resolve dependencies for project
> org.apache.bookkeeper:bookkeeper-server:jar:4.4.0: Cannot access central
> (https://repo.maven.apache.org/maven2) in offline mode and the artifact
> io.netty:netty:jar:debian has not
Package: libsurefire-java
Version: 2.21.0-2
Severity: serious
When libsurefire-java/2.21.0-2 was built last week extra rules were
automatically added to the pom of the Maven plugin:
--- maven-surefire-plugin-2.21.0-1.pom 2018-09-11 00:24:27.213383006 +0200
+++ maven-surefire-plugin-2.21.0-2.pom
Le 11/09/2018 à 00:54, Emmanuel Bourg a écrit :
> I haven't figured out the origin of these rules yet
The rules added are the surefire own ignore rules.
Still looking for what triggered their addition to the pom.
Package: maven-debian-helper
Version: 2.3.2
Severity: serious
I introduced a regression in maven-debian-helper/2.3 when I modified
the Maven mojos to use the plugin annotation. A copy/paste error in
SysInstallMojo caused the ignore rules to be added to the installed
poms instead of the publish rul
Control: reassign -1 gradle-debian-helper 2.0
Control: affects -1 src:jayway-jsonpath
Control: affects -1 src:bnd
Le 17/09/2018 à 00:54, Ivo De Decker a écrit :
> The latest version of jayway-jsonpath in unstable fails on all:
>
> https://buildd.debian.org/status/package.php?p=jayway-jsonpath
T
Control: fixed -1 6.2.1-1
Control: close -1
It looks like the upgrade to the version 6.2.1 fixed this issue.
Control: reassign -1 jarwrapper
Control: affects -1 davmail
This is a jarwrapper bug, the CheckProperty class was compiled without
specifying the source/target level, thus defaulting to Java 10 bytecode
(version 54.0).
is is a different error this time.
gradle-debian-helper isn't to blame here, I think jayway-jsonpath is
simply missing a build dependency on default-jdk-doc (or should disable
the generation of the javadoc since it's doesn't create a doc package).
Emmanuel Bourg
This is actually an issue with lombok not supporting Java 10. It was
fixed with the upload of lombok/1.16.22-1.
Control: tag -1 pending
Hello,
Bug #873213 in aspectj reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/aspectj/commit/91a2664bc1e22fce7968d0e7ebf8afc3
Control: tag -1 pending
Hello,
Bug #906370 in jmock2 reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/jmock2/commit/b347bb139a6924affd1fcb6a21b88b0ad2
Control: tag -1 pending
Hello,
Bug #906375 in libxml-security-java reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/libxml-security-java/commit/5c42ca
Control: tag -1 pending
Hello,
Bug #908166 in swt-gtk reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/swt-gtk/commit/86679ce2b105be643584d39a3e7d92cc
aether-ant-tasks. I'll look into this.
Emmanuel Bourg
Control: reassign -1 aether-ant-tasks
Control: affects -1 scala
This is indeed an issue with aether-ant-tasks which is missing a
classpath entry for sisu-plexus.jar.
kage. I'll see if this can be disabled.
Emmanuel Bourg
Le 15/11/2017 à 17:56, Emmanuel Bourg a écrit :
> I suspect we build the aspectj eclipse plugin but don't even install it
> in the binary package. I'll see if this can be disabled.
Long story short, it can't. aspectj deeply depends on eclipse jdt. Also
upgrading to the
Good catch. Actually it should depend on maven-resolver, eclipse-aether is
about to be removed.
Emmanuel Bourg
r prime time
yet and will probably not be part of the Stretch release.
Emmanuel Bourg
[1] https://www.elastic.co/downloads/elasticsearch
Hi Hilko,
Do you think elasticsearch should be removed from unstable?
Emmanuel Bourg
something like "chmod -R 640 /etc/tomcat8" right
before the chown is an appropriate solution to this issue?
Emmanuel Bourg
[1] https://anonscm.debian.org/cgit/pkg-java/tomcat6.git/commit/?id=f67781f
ion permissions for
all users and setgid root after the purge. Any local user can then take
control of the system.
Emmanuel Bourg
tomcat user for the
tomcat{7,8,9} package that would be easier.
This would be similar to the jetty8 and jetty9 packages sharing the same
'jetty' user (but in this case the user is also removed when the package
is uninstalled, this is problematic when the old package is removed
after the new one is installed).
Emmanuel Bourg
3 also removes the webapp configuration the administrator is
going to be angry (but arguably less than having his system hacked).
Emmanuel Bourg
root:root? That would be less disruptive for the stable and oldstable
updates than removing /etc/tomcat8 completely.
Emmanuel Bourg
is fixes the issue you reported.
https://anonscm.debian.org/cgit/pkg-java/tomcat8.git/commit/?id=02570d6
The script still chmods the Catalina directory but this one can't be
replaced by a symlink.
Emmanuel Bourg
directory is not group-writable.
This is worth trying. The catch is that other packages also install
files into /etc/tomcat8/Catalina/localhost, so they all have to set the
permissions properly. I'll probably go down this path if someone has a
good argument supporting the use of copyXML=true.
Emmanuel Bourg
nd not a file.
I know these packages are broken/outdated, but they are the only
examples of how web applications are supposed to be packaged in Debian.
Emmanuel Bourg
Control: tag -1 pending
Hello,
Bug #922678 in openjdk-11-jre-dcevm reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/openjdk-11-jre-dcevm/commit/957cd53
Control: tag -1 pending
Hello,
Bug #909259 in procyon reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/procyon/commit/6cc3de7e70d327fa597af22d3da08015a
Thank you for the report Sjoerd. What error did you get when compiling
gradle with the rebuilt bsh?
Emmanuel Bourg
in the bsh
build, or by patching Gradle to use Opcodes.ASM7.
Emmanuel Bourg
Le 26/02/2019 à 11:23, Sjoerd Simons a écrit :
> This may or may not be related to 923284
This is the same issue. Gradle breaks when its dependencies use Java 11
bytecode.
Emmanuel Bourg
of
the bug can be downgraded because the issue only appears if the
dependencies are rebuilt. If the issue also appears when project
dependencies use Java 11 this is a more important issue.
Emmanuel Bourg
close it now and Debian bug #917702 too?
Any hope to package JRuby 9.2.x? AFAIK it supports Java 11 better.
Emmanuel Bourg
Package: osmosis
Version: 0.47-3
Severity: serious
Hi,
osmosis currently fails to build in unstable, that was probably caused by
the upgrade of plexus-classworlds in January. Here is a patch fixing the
issue.
Emmanuel Bourg
diff --git a/debian/control b/debian/control
index 4ff5eb5..90019ea
BFS or not osmosis had
to be updated at some point anyway.
Emmanuel Bourg
e
doing here. If osmosis doesn't transition before the full freeze the
Release Team will accept an unblock request to fix a FTBFS.
Emmanuel Bourg
Source: svgsalamander
Severity: serious
Tags: buster sid
svgsalamander fails to build with Java 11.0.2 due to javadoc changes:
-javadoc-build:
[mkdir] Created dir: /build/svgsalamander-1.1.1+dfsg/svg-core/dist/javadoc
[javadoc] Warning: Leaving out empty argument '-windowtitle'
[j
Control: tag -1 pending
Hello,
Bug #923709 in svgsalamander reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/svgsalamander/commit/e21ae07b14950c655e336
27;t mind removing it.
Emmanuel Bourg
Control: severity -1 important
Thank you for the report Breno. I'm lowering the severity, I don't think
this is critical to the point the package should be removed from Stretch.
Emmanuel Bourg
Control: tag -1 pending
Hello,
Bug #893250 in libapache-poi-java reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/libapache-poi-java/commit/5ac19623be
Control: reopen -1
Control: severity -1 important
I'm reopening the bug because ultimately this issue will have to be
fixed, but I'm lowering the severity to prevent the autoremoval.
Control: tag -1 pending
Hello,
Bug #898952 in libnative-platform-java reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/libnative-platform-java/commit/
Package: libquartz2-java
Version: 2.2.3-3
Severity: serious
Tags: sid buster
User: debian-j...@lists.debian.org
Usertags: default-java10
libquartz2-java fails to build with Java 10 due to a change in the signature
of the getPrefixes() method in javax.xml.namespace.NamespaceContext:
[ERROR] Fai
Control: tag -1 pending
Hello,
Bug #905013 in libquartz2-java reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/libquartz2-java/commit/a83bffc7e5327d16
Control: reassign -1 testng
Control: affects -1 dom4j
Control: forcemerge 895886 891437
This issue is actually a duplicate of #895886.
Source: apache-log4j2
Version: 2.10.0-2
Severity: serious
Tags: sid buster
User: debian-j...@lists.debian.org
Usertags: default-java10
apache-log4j2 currently fails to build with Java 10, the build breaks
with the following javadoc error:
[ERROR] javadoc: error - An internal exception has occur
Control: tag -1 pending
Hello,
Bug #905139 in apache-log4j2 reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/apache-log4j2/commit/11dcfae2d315b3114a3b
Control: reopen -1
Control: severity -1 important
I'm reopening the bug because ultimately this issue will have to be
fixed, but I'm lowering the severity to prevent the autoremoval.
Source: jakarta-jmeter
Version: 2.13-3
Severity: serious
User: debian-j...@lists.debian.org
Usertags: default-java9
jakarta-jmeter fails to build with Java 9 due to the generification
of the javax.swing.JTable constructors:
compile-jorphan:
[mkdir] Created dir: /build/1st/jakarta-jmeter-2
Control: tag -1 pending
Hello,
Bug #877706 in jakarta-jmeter reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/jakarta-jmeter/commit/ec0147497d56961274
Control: tag -1 pending
Hello,
Bug #905145 in jakarta-jmeter reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:
https://salsa.debian.org/java-team/jakarta-jmeter/commit/fc51322ad612ab629c
go/darwin/jmodeltest/ModelTestService.java:31:
error: package converter does not exist
[javac] import converter.Factory;
[javac] ^
There is an issue with a dependency (alter-sequence-alignment maybe?),
the Java version isn't to blame here.
Emmanuel Bourg
e-xml is a dependency of carrotsearch-randomizedtesting.
The fix should be trivial, it's just a matter of disabling external
entities parsing on the underlying XML parser. And maybe we've already
fixed the XML parser used by default.
Emmanuel Bourg
nished once that was
reverted in ant/1.10.4-2.
Emmanuel Bourg
ist for collecting RC bugs.
I agree. Not all CVEs are equally important though, here simple-xml is
just a test dependency of another package and has a very low popcon, the
vulnerability has no real impact on the Debian users.
Emmanuel Bourg
On 25/08/2018 09:00, Andreas Tille wrote:
> I realised that there is a new upstream version, fixed the watch file in
> Git and tried to build the package. Unfortunately the build fails as
> well.
Do you get the same build failure with the new version?
Emmanuel Bourg
On 25/08/2018 17:44, Andreas Tille wrote:
> No, it is different:
> [ERROR] The project com.itextpdf:itextpdf:5.5.13
> (/build/libitext5-java-5.5.13/itext/pom.xml) has 1 error
> [ERROR] Non-resolvable parent POM for com.itextpdf:itextpdf:5.5.13:
> Cannot access central (https://repo.maven.a
On 28/08/2018 21:31, Jochen Sprickerhof wrote:
> As a quick fix we could probably hack around the visibility modifiers of
> Marshaller, but I guess that would be rather ugly. Just mentioning it
> for completeness.
+1 for adjusting the xml-security API.
Emmanuel Bourg
Control: reassign -1 libeclipse-osgi-java
Control: affects -1 libequinox-osgi-java
libeclipse-osgi-java will replace libequinox-osgi-java. I forgot to add
the proper Breaks/Replaces fields.
s (Maven Central as upstream vs
Eclipse Git repository, different naming convention, different build
system, no upstream version tracking). That's why I think it's more
consistent to replace libequinox-osgi-java now.
Emmanuel Bourg
[1] https://lists.debian.org/debian-java/2018/07/msg00020.html
Le 03/09/2018 à 17:29, Markus Koschany a écrit :
> Just updating libequinox-osgi-java would have been
> a straightforward solution.
I agree this is mostly a change in the name of the binary package. I
could have kept the libequinox-osgi-java name with some contortions and
avoid updating the rever
Control: block -1 908023
Control: tags -1 + pending
I've prepared the upgrade of async-http-client to the version 2.5.3
which uses Netty 4.1, but it requires a new dependency (see #908023).
The update is ready in the Salsa repository.
Control: tag -1 pending
Hello,
Bug #917975 in eclipse-jdt-debug reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/eclipse-jdt-debug/commit/764f7e9134687
27;, and we've set the
--has-package-version flag stating that the pom and the package have the
same version, which is wrong.
I've fixed that in swt4-gtk/4.10.0-2
Emmanuel Bourg
is moment what versions of the OpenHFT
libraries are required.
Emmanuel Bourg
er and I don't have the time to look
into this anymore.
If someone wants to pick the ball the next steps are to:
1. build SBT 1.0 without the embedded libraries
2. build Scala 2.12
Emmanuel Bourg
3.4.2-1 and it derailed the jarjar processing.
Emmanuel Bourg
Control: tag -1 pending
Hello,
Bug #906398 in jarjar reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/jarjar/commit/ccaf9a36d3997189b62e9a40467d8c7808e
Control: reassign -1 libvorbis-java
Control: affects -1 src:tika
I'm reassigning the bug to vorbis-java because the tika module should be
enabled there to fix this dependency issue. I'll look at the other
compilation errors separately.
Emmanuel Bourg
Control: tag -1 pending
Hello,
Bug #850798 in vorbis-java reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/vorbis-java/commit/fa4d31bd4ed86256d98ba839f
Control: tag -1 pending
Hello,
Bug #919092 in mongo-java-driver reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/mongo-java-driver/commit/2131e5961ae83
Control: tags -1 + wontfix
Control: close -1
log4j doesn't depend on mongodb.
s can
wait the next package update. I don't think the mongodb module is
actually used.
Emmanuel Bourg
rsion 3.17
first. That'll allow us to upgrade tika. I'll then proceed to upgrade
POI to the version 4.x.
Emmanuel Bourg
Control: tag -1 pending
Hello,
Bug #825501 in tika reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/tika/commit/da8f564f02250bc904da8c03c45d2fa4c8f9c14
Control: tag -1 pending
Hello,
Bug #912476 in libapache-poi-java reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/libapache-poi-java/commit/f73c09cc8ef
in the Java community is to support only the LTS releases
(Java 8, 11, 17, etc).
Emmanuel Bourg
a bottle
of Champagne if someone does).
The good news is, we won't have to go that route, because this issue
isn't caused by Scala but by jarjar. It embeds a subset of the ASM
classes and at least one is missing. I'll upload a fix today.
Emmanuel Bourg
Control: tag -1 pending
Hello,
Bug #919064 in jarjar reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/jarjar/commit/1808732905069364dc97ae7cb2666ad8c17
Control: tag -1 pending
Hello,
Bug #918552 in lombok reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/java-team/lombok/commit/c2721ae83c0f09cc3a83bd37a07835a36bb
Control: severity -1 wishlist
Hi Andreas,
Actually lombok is the exception that is forcing us to ship (but not
support) openjdk-8-jdk in Buster. It's a build time only dependency,
lombok works with OpenJDK 11 at runtime.
Emmanuel Bourg
visualvm with Java 8? You tried running visualvm with Java 8 or you
tried attaching visualvm to a Java 8 VM?
Emmanuel Bourg
pport OpenJDK 11, this will
be documented in the release notes.
Emmanuel Bourg
mething similar.
This is an excellent suggestion. We should file a bug for openjdk-8 to
implement that.
Emmanuel Bourg
uster without openjdk-8, the package should remain in unstable until
this is sorted out.
Emmanuel Bourg
Le 05/02/2019 à 15:05, Emmanuel Bourg a écrit :
> The real issue is lombok, it needs both Java 8 and 11 to build (and even
> 6 and 7! But we managed do to without that).
Erratum: I've just figured out how to build lombok with Java 11 only.
Once ivyplusplus is taught about the new jav
Le 14/08/2015 11:42, Salvatore Bonaccorso a écrit :
> Any news on an update for sid->stretch as well?
I can't do it before the end of the month. I'll combine the fix with an
update to the version 2.7.
g
netty 4.x. I'll reuse the libnetty-java package and move it under the
Java Team umbrella.
Emmanuel Bourg
If I'm not mistaken it simply notifies about new versions and doesn't
attempt to update its own code. This is certainly useless in the Debian
context but I fail to see how this issue could be a severe policy
violation that should lead to the removal of this package if not fixed.
Emmanuel Bourg
ng the
wrong netty artifact, curator isn't to blame here.
Emmanuel Bourg
ith jackson-* >= 2.8
Let's just remove the package.
Emmanuel Bourg
1 - 100 of 779 matches
Mail list logo
