Re: PDFBox 2.0.6

Am 29.06.2017 um 09:02 schrieb Emmanuel Bourg: > Le 29/06/2017 à 00:13, Markus Koschany a écrit : > >> Thoughts? > > Let's just update fontbox, that's the right time to do it and there > aren't many reverse dependencies. If we fail to port them to the new > version we can

PDFBox 2.0.6

Hi, I'm currently working on updating pdfsam. As usual there are tons of new dependencies. I believe I can manage to package them but at the moment I'm stuck at SAMBox and its build-dependency fontbox. SAMBox is a fork of PDFBox' 2.x branch. It requires fontbox 2.0.6 which is part of the PDFBox

Re: Understanding bootstrapping a new language for the JVM

Am 22.06.2017 um 13:55 schrieb Markus Koschany: > Am 22.06.2017 um 13:38 schrieb Emmanuel Bourg: >> Le 22/06/2017 à 13:16, Markus Koschany a écrit : >> >>> Can we force Maven (or any other build tool) to use an already built >>> artifact instead of searching for th

Bug#866099: ITP: libtwelvemonkeys-java -- collection of plugins and extensions for Java's ImageIO

Package: wnpp Severity: wishlist Owner: Markus Koschany <a...@debian.org> * Package name: libtwelvemonkeys-java Version : 3.3.2 Upstream Author : Harald Kuhr * URL : https://github.com/haraldk/TwelveMonkeys * License : BSD-3-clause, ASL Programming Lang

Re: Understanding bootstrapping a new language for the JVM

Am 22.06.2017 um 13:38 schrieb Emmanuel Bourg: > Le 22/06/2017 à 13:16, Markus Koschany a écrit : > >> Can we force Maven (or any other build tool) to use an already built >> artifact instead of searching for the equivalent in a local or remote >> repository? > > I

Re: Understanding bootstrapping a new language for the JVM

Hi, Am 22.06.2017 um 08:31 schrieb Emmanuel Bourg: [...] >> How does one cope with such a situation for building a package >> suitable for Debian? I suppose that this problem was already dealt >> with at least with clojure and scala. >> >> Any help here would be quite enlightening. > > A common

Re: packaging from java maven

Hi, Am 25.05.2017 um 20:20 schrieb Nada Gh: > Hi, > > I have a java source that was built using maven without debian source. > How can I generate debian source with all necessary tarballs for building? > > > *I found two options, but couldn't implement them:* > > 1- Using (get-orig-source )

Re: [stretch] jnr-posix/3.0.12-3 and #860691

Am 30.04.2017 um 09:19 schrieb Niels Thykier: [...] >> Please note that the tests are not disabled but the results are simply >> ignored. >> [...] > >>From my PoV, that is basically the same as disabling them. We do not > pre-emptively check log files during rebuild tests/buildd builds, so we >

Re: [stretch] jnr-posix/3.0.12-3 and #860691

Hi, Am 29.04.2017 um 23:22 schrieb Niels Thykier: > Hi, > > I have opted to stretch-ignore #860691 instead of unblocking the > jnr-posix/3.0.12-3 upload for now. > > If the tests are simply wrong on i386, then that is fine and the fix can > wait until buster (or you are welcome to patch them in

Call for testing: tomcat7 and tomcat8 security updates

Hi all, I have prepared security updates for Tomcat 7 and Tomcat 8 in Wheezy and Jessie. It would be great if you could give it a try and please tell me about any issues you encounter. These updates change the way how the Sendfile property is handled by Tomcat. This is especially important for

Re: Problem with CRL handling

Hi, Am 29.03.2017 um 08:39 schrieb Christopher Odenbach: [...] > Where should I install my CRL that the default > Debian mechanisms work as expected? [...] AFAIK there is no specific place for CRL files in Debian but for your specific use case I would suggest to define the location of your CRL

Re: freeplane-1.5.18-2: Fix for PDF Export

Am 12.03.2017 um 17:35 schrieb Felix Natter: > hello debina-java, > > I just fixed a freeplane PDF Export problem that was reported for > stretch and Ubuntu 16.10 (Debian: #856058, LP: #172). > > The VCS is here: > https://anonscm.debian.org/cgit/pkg-java/freeplane.git > > Of course it is

Re: pkg-java upload queue

Am 09.03.2017 um 13:49 schrieb Frederic Bonnard: > Hi, > > > I'd like to make available

Bug#857123: lintian: warning about missing classpath is confusing

Package: lintian Version: 2.5.50.1 Severity: normal Hi, I think the Lintian warning about a "missing classpath" in Java libraries and applications is not very helpful at the moment. Newcomers and even seasoned Java developers are either confused by it or simply ignore it thus its usefulness is

Re: About manifest's Class-Path

Am 28.02.2017 um 14:56 schrieb Emmanuel Bourg: [...] > You can ignore this warning, it isn't very important and arguably flawed > for various reasons. Shall I file a bug report against Lintian to remove it? Or can this warning be improved somehow? Most people seem to ignore it at the moment.

Re: Javahelper and java-doc dependencies

Am 22.02.2017 um 10:53 schrieb Ole Streicher: > Hi all, > > wen using javahelper, I can automatically generate the java dependencies > with ${java:Depends}. However, our Java policy also states some > dependencies for the javadoc package: "The API must link against the > javadoc API of the

Re: RFS: smali-1/1.4.2-1 [ITP]

On 21.02.2017 13:23, Hans-Christoph Steiner wrote: > > > Markus Koschany: >> On 20.02.2017 09:03, 殷啟聰 wrote: >>> Hi Markus, >>> >>> That makes sense, I'll rename it to libsmali-1-java and move it to >>> android-tools. Although I think it wou

Re: RFS: smali-1/1.4.2-1 [ITP]

On 20.02.2017 09:03, 殷啟聰 wrote: > Hi Markus, > > That makes sense, I'll rename it to libsmali-1-java and move it to > android-tools. Although I think it would also make sense if you had > put libsmali-java in pkg-java in the first place, since it's just a > Java library. Smali is a

Re: RFS: smali-1/1.4.2-1 [ITP]

On 16.02.2017 11:12, 殷啟聰 wrote: > Hi pkg-java team, > > I have prepared for a new source package smali-1 [1] which builds the > following: > > * libsmali-dexlib-1-java > > It is the version 1.x of dexlib which is incompatible with dexlib2 in > the existing libsmali-java [2] but is need by

Bug#853233: jessie-pu: package groovy/1.8.6-4+deb8u1

deserializes objects are subject to this +vulnerability. + + -- Markus Koschany <a...@debian.org> Mon, 30 Jan 2017 17:20:04 +0100 + groovy (1.8.6-4+deb8u1) stable; urgency=high * Fix remote execution of untrusted code and possible DoS vulnerability. diff -Nru groovy-1.8.6/debian/p

Re: Objenesis 2.5

On 16.01.2017 09:35, Emmanuel Bourg wrote: [...] > This looks like an upstream bug to me. Thank you. I have filed an upstream bug report just now. https://github.com/easymock/objenesis/issues/49 Markus signature.asc Description: OpenPGP digital signature

Objenesis 2.5

Hi, I'm working on an update for objenesis. The package currently fails to build because one of the tests causes an error. Has anyone an idea why the test is failing now? I've pushed my changes to the experimental branch. Cheers, Markus ---

Re: Building maven packages

On 30.12.2016 04:44, Wookey wrote: [...] > BTW. if I try to use mh_patchpoms -plibmaven-native-java and > mh_unpatchpoms -plibmaven-native-java to test if my rules are right > (quicker than doing a build), I get dpkg-source complaining that all > the pom.xml files have changed from the orig. I

Re: Building maven packages

On 30.12.2016 00:52, Wookey wrote: > On 2016-12-30 00:11 +0100, Markus Koschany wrote: >> On 29.12.2016 02:29, Wookey wrote: > >> Don't try to hard to make mh_make happy because it can only give you a >> rudimentary skeleton debian directory. (For "easy" package

Re: Building maven packages

On 29.12.2016 02:29, Wookey wrote: [...] Hi Wookey, > So why didn;t my substition rules of > s/bcel/bcel/ s/bcel/bcel/ jar s/5.1/5.x/ > or > s/bcel/bcel/ s/bcel/bcel/ jar s/5.1/6.0/ > work? > > The upstream pom.xml has: > > bcel > bcel > 5.1 > > > The

Re: Netbeans 8.2

Final note to possible future contributors: I have finally managed to compile Netbeans 8.2 but I had to replace several modules with the ones shipped in 8.1. Thus the whole package is not really ready to be shipped with Stretch. It works at first glance though. It should also be available in

Re: Netbeans 8.2

Unfortunately I am stuck with Netbeans 8.2 at the moment. I tried to use OpenJDK 9 to compile the sources but then the build failed earlier on with a different error message. I also cannot import the original tarball with git-buildpackage which adds to my frustration. I think getting 8.2 into

Netbeans 8.2

Hi folks, I have been struggling with the latest upstream release of Netbeans for the last couple of weeks. I think I'm almost there now but I am at a point where new error messages pop up which don't really make sense to me. I have uploaded my current debian directory, the original tarball and

Re: Please upload freeplane-1.5.18-1

On 15.12.2016 20:15, Felix Natter wrote: > Markus Koschany <a...@debian.org> writes: > >> On 11.12.2016 14:42, Felix Natter wrote: >>> hello Debian-Java, >>> >>> could someone please upload freeplane-1.5.18-1 from git? >>> https://anonscm.deb

Re: Please upload freeplane-1.5.18-1

On 11.12.2016 14:42, Felix Natter wrote: > hello Debian-Java, > > could someone please upload freeplane-1.5.18-1 from git? > https://anonscm.debian.org/cgit/pkg-java/freeplane.git > > It's a new upstream release (and probably the last for stretch). > > Many Thanks and Best Regards, >

Re: Freeplane and latest jgoodies-forms: strange runtime error

On 06.12.2016 16:31, tony mancill wrote: > On Tue, Dec 06, 2016 at 11:22:46AM +0100, Thorsten Glaser wrote: >> On Mon, 5 Dec 2016, Felix Natter wrote: >> >>> 2. Could someone please help analyse the underlying problem >> >> I was also bitten by this problem: >> >>

Re: Freeplane and latest jgoodies-forms: strange runtime error

On 06.12.2016 18:59, Thorsten Glaser wrote: > On Tue, 6 Dec 2016, Emmanuel Bourg wrote: > >> issues. if a package often breaks the compatibility and isn't security >> sensitive, then maintaining more than one version is probably more >> efficient (jgoodies and guava fall into this category). > >

Re: Version failures creating a package with mh_make on Sid

On 28.11.2016 19:51, Ingo Bauersachs wrote: >> On 28.11.2016 00:04, Ingo Bauersachs wrote: >>> Hey all >>> >>> I'm trying to package dnssecjava (ITP 845371). I used mh_make on Jessie to >>> do this and succeeded to upload a version to mentors. Emmanuel asked me to >>> do the packaging on Sid

Re: Version failures creating a package with mh_make on Sid

Hi, On 28.11.2016 00:04, Ingo Bauersachs wrote: > Hey all > > I'm trying to package dnssecjava (ITP 845371). I used mh_make on Jessie to > do this and succeeded to upload a version to mentors. Emmanuel asked me to > do the packaging on Sid instead, where I'm now failing. > > What I did so far:

Re: RFS: libnative-platform-java/0.11-1

On 02.11.2016 11:50, 殷啟聰 wrote: > Hi, > > I have prepared an update for this package. The changelog is: > > * New upstream release > * d/copyright: Exclude *.jar > * d/control: > * Depends on default-jdk-headless | default-jdk > * Remove unused build-dependencies: ant,

Re: Building maven packages

On 02.11.2016 05:52, Wookey wrote: > Hi chaps and chapesses, Hi Wookey, > > I am trying to package javalution: > http://javolution.org/ > code at: > https://svn.java.net/svn/javolution~svn > > I am very vague about java in general (I don't use the language), but > have sucessfully packaged

Re: Eclipse 4.x and Tycho

On 21.10.2016 09:46, Luca Vercelli wrote: > Dear Markus, > I'm happy to hear news about this. If you intend to package Tycho, > please remember there is something here already: > > https://mentors.debian.net/package/tycho [...] Hello Luca, thank you very much for your initial packaging effort.

Eclipse 4.x and Tycho

Hey, thanks to Emmanuel there is currently some action with Eclipse going on but I wanted to give a heads-up that I intend to package Tycho soon. My goal is to package the latest version of Eclipse and probably one or two useful Eclipse modules to get at least an up-to-date core version into

Re: Tomcat 8.5 packaging

On 03.10.2016 11:10, Emmanuel Bourg wrote: [...] > What do you think? I agree that reusing the existing Tomcat 8 package and packaging Tomcat 8.5 for Stretch would be the best way forward, especially for long term maintainability. Markus signature.asc Description: OpenPGP digital signature

Re: Jackrabbit security update

On 26.09.2016 21:01, Florian Weimer wrote: > * Florian Weimer: > >> * Markus Koschany: >> >>> I have prepared a security update for Jackrabbit to fix CVE-2016-6801. >> >> Hi Markus, >> >> thanks, this looks good to me packaging-wise. Have you

Jackrabbit security update

variations in field values with respect to +upper/lower case or optional parameters. This could be exploited to create +a resource via CSRF. + + -- Markus Koschany <a...@debian.org> Mon, 26 Sep 2016 15:20:09 +0200 + jackrabbit (2.3.6-1+deb8u1) jessie-security; urgency=medium

Bug#838396: jessie-pu: package zookeeper/3.4.5+dfsg-2

, were affected by a buffer overflow vulnerability associated +with parsing of the input command when using the "cmd:" batch mode syntax. +If the command string exceeds 1024 characters a buffer overflow will occur. + + -- Markus Koschany <a...@debian.org> Sun, 18 Sep 201

Re: freeplane-1.5.16-1

On 18.09.2016 17:12, Felix Natter wrote: > hello Debian-Java, > > I have updated freeplane to 1.5.16, which fixes among others a HTML > persistency problem. > > Would someone please consider sponsoring this? > > The VCS is here: > https://anonscm.debian.org/cgit/pkg-java/freeplane.git > > No

Re: RFS: freeplane/1.5.15-1

On 27.08.2016 14:08, Felix Natter wrote: > > Package: sponsorship-requests > Severity: normal > > Dear mentors, > > I am looking for a sponsor for my package "freeplane" Hi Felix. Thanks for the update. I've just uploaded freeplane. By the way you don't need to file sponsorship-requests for

Re: Cleaning upstream tarballs

Hi Christopher, On 18.08.2016 22:41, Christopher Hoskin wrote: > I'm considering how to remove .jar files and convenience copies of other > libraries from upstream tar balls. It seems to me that there are several > ways of approaching repacking: > > 1) Add Files-Excluded to debian/copyright > 2)

Re: [tomcat8] 05/06: Change file permissions for Debian files to 640 in /etc/tomcat8.

On 15.08.2016 19:24, Moritz Muehlenhoff wrote: > On Mon, Aug 15, 2016 at 06:42:31PM +0200, Markus Koschany wrote: >> On 15.08.2016 18:31, Emmanuel Bourg wrote: >>> On 08/15/2016 06:19 PM, Markus Koschany wrote: >>> >>>> This is the ex

Re: [tomcat8] 05/06: Change file permissions for Debian files to 640 in /etc/tomcat8.

On 15.08.2016 18:16, Emmanuel Bourg wrote: > On 08/15/2016 06:12 PM, Markus Koschany wrote: > >> + * Change file permissions to 640 for Debian files in /etc/tomcat8. > > This change shouldn't go in Jessie, only the chmoding of the Tomcat files. > > Emmanuel Bourg &g

Re: In need for a review of java part of RFS #832704

On 13.08.2016 11:38, Boyuan Yang wrote: > Hello everyone, > > I am working on the nixnote2 [0] packaging. You may find the ITP [1] > and RFS [2] on Debian BTS. > > This is mainly a C++ / Qt project but contains a little pre-bulit jar > file for feature enhancement. Luckily the java source code

Re: Gradle and transitive dependencies

On 07.08.2016 12:32, Christopher Hoskin wrote: > Dear Markus, > > Thanks for the reply. I've changed the debian/maven.rules file so that > it just has: > > junit junit jar s/4\..*/4.x/ * * > > But if I run debuild, I still get the same error message. > > Looking in > >

Re: Bug#833515: alter-sequence-alignment: FTBFS: failed to create task or type foreach

On 05.08.2016 16:14, Andreas Tille wrote: > Hi Java team, > > since I do not have the slightest idea why the package which has built > once does not build any more I'd like to forward this bug to ask for > your kind help. Hello, here is how I investigated the build failure: * Search for

Re: Gradle and transitive dependencies

Hello, On 07.08.2016 11:11, Christopher Hoskin wrote: > Hello, > > I'm trying to update the mongo-java-driver package to 3.3.0, using > gradle-debian-helper. [...] > My questions are: > > 1) Why doesn't junit have a 'debian' version? Is this just an > oversight or a deliberate decision? We

Re: Different Java library versions

On 28.07.2016 17:19, George Bateman wrote: > Hi Markus, > > Processing has a rather complex build system, so I've deliberately > avoided the packaging helpers and just added tasks to the upstream Ant > script, so the debian/rules file is just a simple wrapper around > build.xml. So far this has

Re: Different Java library versions

On 28.07.2016 16:30, George Bateman wrote: > Hi, > > I'm packaging Processing (https://processing.org/), and I'm planning > to split it into three packages: processing, processing-doc, and > libprocessing3-java. I understand from > > that I'm supposed to create

Re: Upgrading svgSalamander

On 16.07.2016 18:57, Felix Natter wrote: > hi, > > I would like to update svgSalamander (lightweight SVG renderer for Java > including Swing) [1] to the just released 1.0. I tried to contact > the 0~svn95-1 uploader (see CC:) but he hasn't responded for weeks now. > > There seems to be no

Re: Security update of mysql-connector-java

On 22.06.2016 18:19, Markus Koschany wrote: > On 22.06.2016 08:47, Moritz Mühlenhoff wrote: >> On Wed, Jun 22, 2016 at 01:01:14AM +0200, Markus Koschany wrote: >>> On 22.06.2016 00:43, Emmanuel Bourg wrote: >>>> Le 22/06/2016 à 00:28, Markus Koschany a écrit : >>

Re: Artifact relocation with the Maven helpers

On 01.07.2016 01:02, Emmanuel Bourg wrote: > Hi all, > > I've implemented a new interesting feature in maven-repo-helper 1.9 and > maven-debian-helper 2.1, it's now possible to relocate an artifact > toward another one. This is roughly the equivalent of symlinks but for > the Maven dependencies.

Re: maven.rules syntax

On 24.06.2016 09:25, Luca Vercelli wrote: > Dear Java team, > I cannot understand the exact syntax of maven.rules. Is there any manual > on the web? or in man pages? > Thank you > > Luca > mh_make usually installs a template for maven.rules in every package. The different fields are explained

Re: Security update of mysql-connector-java

On 22.06.2016 08:47, Moritz Mühlenhoff wrote: > On Wed, Jun 22, 2016 at 01:01:14AM +0200, Markus Koschany wrote: >> On 22.06.2016 00:43, Emmanuel Bourg wrote: >>> Le 22/06/2016 à 00:28, Markus Koschany a écrit : >>> >>>> Houston, we have a proble

Re: Security update of mysql-connector-java

On 22.06.2016 00:43, Emmanuel Bourg wrote: > Le 22/06/2016 à 00:28, Markus Koschany a écrit : > >> Houston, we have a problem. It seems the latest upstream release >> requires Java 8 for building JDBC 4. In Jessie even Java 6 was >> sufficient. I suggest we ship version 5

Re: Security update of mysql-connector-java

On 20.06.2016 19:41, Markus Koschany wrote: > On 20.06.2016 19:38, Moritz Muehlenhoff wrote: >> On Mon, Jun 20, 2016 at 06:48:58PM +0200, Markus Koschany wrote: >>> Hello, >>> >>> I am thinking about to upgrade mysql-connector-java to the latest stable >>

Re: Please review libjt400-java

On 21.06.2016 23:19, Luca Vercelli wrote: > Dear Markus, > are you sure of this? The package is built with Ant, not with Maven, so > it cannot be a pure Maven package, am I wrong? Hello, That's probably a misunderstanding. I meant it is a pure "maven-repo-helper" package (referring to the Debian

Re: Please review libjt400-java

Hello Julián, On 21.06.2016 00:43, Julián Moreno Patiño wrote: [...] > I believe that some maven jars are missing. > > Could you give me a hint? > > Thanks in advance, > You need to remove the *.jlibs file, which is javehelper specific and conflicts with pure maven_repo_helper and edit your

Re: Security update of mysql-connector-java

On 20.06.2016 19:38, Moritz Muehlenhoff wrote: > On Mon, Jun 20, 2016 at 06:48:58PM +0200, Markus Koschany wrote: >> Hello, >> >> I am thinking about to upgrade mysql-connector-java to the latest stable >> version in Wheezy and Jessie to address >> >> http

Security update of mysql-connector-java

Hello, I am thinking about to upgrade mysql-connector-java to the latest stable version in Wheezy and Jessie to address https://security-tracker.debian.org/tracker/CVE-2015-2575 As usual Oracle does not provide concrete information about the vulnerability or a patch for older versions. On the

Re: Please review libjt400-java

On 16.06.2016 02:57, Julián Moreno Patiño wrote: > Hello, > > I am not an expert java packager, so I like some comments > about libjt400-java new package. > > Please check out: > > https://anonscm.debian.org/cgit/pkg-java/libjt400-java.git > Hi Julián, the packaging looks good to me. You

Re: RFS: stegosuite/0.7.3-1 [ITP]

On 14.06.2016 00:58, Tobias wrote: [...] >> Not every piece of code is copyrightable, so there might be a chance >> that there is no action required from our side. In any case I suggest to >> add a Comment: section to your main Files: * paragraph. It helps if you >> clarify these comments with a

Re: RFS: stegosuite/0.7.3-1 [ITP]

On 12.06.2016 15:23, Tobias wrote: > Dear Java packagers, > > I am looking for a sponsor for my package "stegosuite". Hi Tobias, Thanks for your update. I had to update the BSD-2-clause license because they mention that parts of their code was taken from the JPEG group. In this case we must

java.debian.net blog: Wheezy LTS and the switch to OpenJDK 7

Hi all, what do you think about my initial draft about "Wheezy LTS and the switch to OpenJDK 7". Please fix all grammar and spelling mistakes. :) https://anonscm.debian.org/cgit/pkg-java/pkg-java-blog.git/tree/content/2016/wheezy-lts-and-the-switch-to-openjdk7.md Cheers, Markus

libpdfbox-java security update

, and other system +impacts. + + -- Markus Koschany <a...@debian.org> Sun, 12 Jun 2016 14:42:07 +0200 + libpdfbox-java (1:1.8.7+dfsg-1) unstable; urgency=medium * New upstream release. diff -Nru libpdfbox-java-1.8.7+dfsg/debian/patches/CVE-2016-2175.patch libpdfbox-java-1.8.7+dfsg/

Re: Bug#826864: epubcheck doesn't run anymore

On 09.06.2016 19:20, Eugene Zhukov wrote: > Hi Joseph, > > Thank you for the bug report. Unfortunately I'm away from keyboard until > Monday. > I see you found this bug in Debian stable release, can you also > reproduce this with Debian testing/unstable (if you have a possibility > to try of

Re: stegosuite_0.7.2-1_amd64.changes REJECTED

On 08.06.2016 10:44, Tobias wrote: > Hi, > I updated debian/copyright accordingly. It's in master at > https://anonscm.debian.org/git/pkg-java/stegosuite.git > But I'm not sure, how to proceed. Delete the debian/0.7.2-1 tag and re-tag > this commit? Or use debian/0.7.2-2? > > Regards, > Tobias

Re: Seeking a sponsor

On 05.06.2016 11:26, George Bateman wrote: > Hi, > > I'm trying to package Processing and its > dependencies for Debian; I'm a contributor to it upstream. I've > packaged one dependency, Classpath Explorer, filed an ITP, and > submitted it to mentors.debian.net: >

Re: RFS: stegosuite/0.7.2-1 [ITP]

On 03.06.2016 19:24, Tobias wrote: > Hi Markus, > > thanks a lot for your effort. Hi Tobias, Thanks for your contribution. I have uploaded stegosuite to unstable and it is now awaiting approval from Debian's ftp team. I've made some small changes and you can view them here:

Re: RFS: stegosuite/0.7.2-1 [ITP]

Hello Tobias, I intend to sponsor your package if we can resolve the remaining issues. Please upload future versions of stegosuite to mentors.debian.net until the package is officially accepted into Debian. We can later work from the pkg-java Git repository directly. Please change the Git VCS

Re: Tomcat 8 security update

On 30.05.2016 01:00, Emmanuel Bourg wrote: > Le 30/05/2016 à 00:12, Markus Koschany a écrit : > >> I have prepared a security update for Tomcat 8 fixing 7 CVEs. In >> addition I would like to fix #825786. We currently overwrite file >> permissions in /etc/tomcat8/ unc

Tomcat 8 security update

Hi, I have prepared a security update for Tomcat 8 fixing 7 CVEs. In addition I would like to fix #825786. We currently overwrite file permissions in /etc/tomcat8/ unconditionally which could break user specific changes on upgrade. The fix is to revert to default file permissions root:root

Re: New steganography application

Am 22.05.2016 um 13:52 schrieb Tobias: > Hi, > > I still get the following lintian warnings: > > W: stegosuite: new-package-should-close-itp-bug > W: stegosuite: incompatible-java-bytecode-format Java8 version (Class format: > 52) > W: stegosuite: binary-without-manpage usr/bin/stegosuite > >

Re: Last take on updating netlib (Was: Problems when trying to create Debian packages from latest Netlib)

Hi Andreas, Am 18.05.2016 um 15:53 schrieb Andreas Tille: [...] >> >> Depending on your future projects with netlib this might be easier for >> you. Just combine the sources and create a new orig tarball or package >> the artifacts separately. > > So what you want to tell me is for instance to

Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS

[dropping Rene from CC because he is subscribed to debian-java] Am 17.05.2016 um 17:56 schrieb Antoine Beaupré: > On 2016-04-25 06:34:53, Markus Koschany wrote: [...] >> We don't intend to remove OpenJDK 6 but it will receive no further >> security updates. > > .. starting

Re: libmnemonicsetter-java: Please review

Am 08.05.2016 um 14:57 schrieb Felix Natter: [...] > Fixed. Thanks for the review and for sponsoring. > Uploaded. Thanks for your contribution. Regards, Markus signature.asc Description: OpenPGP digital signature

Re: libmnemonicsetter-java: Please review

Hi Felix, Am 07.05.2016 um 16:39 schrieb Felix Natter: > hello debian-java, > > I have a very simple gradle package (libmnemonicsetter-java) which will > be needed for freeplane-1.5.9 (and simplyhtml-0.16.17), to be released > in a few weeks: >

Re: Java Team blog

Hello! [Are you subscribed to debian-java? Then I don't need to CC you.] Am 05.05.2016 um 05:17 schrieb Christopher Hoskin: > Thanks for setting up the blog. > > Regarding "Outlook, goals and request for help", I'm interested in > helping out. I've been trying to get involved for a while, but

Re: Java Team blog

Am 04.05.2016 um 09:46 schrieb Emmanuel Bourg: > Hi all, > > I've set up a blog for the Java team on alioth, it's available here: > > http://java.debian.net/blog/ > > This is a static blog generated by Pelican, the sources are stored in a > Git repository accessible to all pkg-java members:

Re: Packaging javax.json (Was: Bug#800762: Java problem when upgrading pixelmed)

Am 26.04.2016 um 20:54 schrieb Andreas Tille: > On Tue, Apr 26, 2016 at 04:22:23PM +0200, Emmanuel Bourg wrote: >> Le 26/04/2016 16:06, Andreas Tille a écrit : >> >>> I have no free capacity to do large scale packaging >>> of new dependencies. So if somebody volunteers to package javax.json >>>

Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS

Am 25.04.2016 um 12:23 schrieb Rene Engelhard: > Hi, > > On Mon, Apr 25, 2016 at 12:17:52PM +0200, Markus Koschany wrote: >> we are mainly concerned about runtime issues with OpenJDK 7. Libreoffice >> declares dependencies on default-jre | openjdk-7-jre, so I believe it &g

Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS

Am 25.04.2016 um 11:41 schrieb Rene Engelhard: > Hi, > > On Wed, Apr 20, 2016 at 06:22:51PM +0200, Markus Koschany wrote: >> I would like to ask everyone who uses Java in server or desktop >> environments to test their applications with OpenJDK 7 and to prepare >&g

Bug#822417: RM: libcommons-net2-java -- ROM; superseded by libcommons-net-java (>= 3)

Package: ftp.debian.org Severity: normal Hi, please remove libcommons-net2-java from Debian. It was superseded by libcommons-net-java (>= 3). Thanks, Markus

Bug#822298: RM: asm2 -- ROM; superseded by asm

Package: ftp.debian.org Severity: normal Hi, please remove src:asm2 from Debian. The last package that depended on it was fixed yesterday. It has been superseded by src:asm. Thanks, Markus

Call for tests: Making OpenJDK 7 the default in Wheezy LTS

Hi all, as you may already be aware, the intention is to make OpenJDK 7 the default Java implementation in Wheezy LTS to ensure full security support until 31 May 2018. The switch will happen on 26 June 2016. I would like to ask everyone who uses Java in server or desktop environments to test

Re: Tomcat 7 security update

Am 16.04.2016 um 19:58 schrieb Florian Weimer: > * Markus Koschany: > >> Am 16.04.2016 um 16:14 schrieb Florian Weimer: >> [...] >>> Packaging-wise, the changes look okay. Could you please upload? >> >> Uploaded to security-master. > > Have you tes

Re: Tomcat 7 security update

Am 16.04.2016 um 16:14 schrieb Florian Weimer: [...] > Packaging-wise, the changes look okay. Could you please upload? Uploaded to security-master. Regards, Markus signature.asc Description: OpenPGP digital signature

Insubstantial transition (almost) complete

Hi all, yesterday I uploaded src:insubstantial to unstable together with new upstream versions of Jajuk and TripleA to replace src:substance, src:trident, src:flamingo and src:liblaf-widget-java. In case you don't remember anymore because it took several months to fix all outstanding issues,

Re: Need help to upgrade libnetlib-java package

Am 10.04.2016 um 09:14 schrieb Andreas Tille: > On Sat, Apr 09, 2016 at 05:24:10PM +0200, Markus Koschany wrote: >>>> https://anonscm.debian.org/cgit/pkg-java/libnetlib-java.git >> >> sorry I can't get it to work either. I don't understand the error &

Re: Need help to upgrade libnetlib-java package

Am 05.04.2016 um 13:02 schrieb Andreas Tille: > On Tue, Apr 05, 2016 at 12:10:36PM +0200, Markus Koschany wrote: >> Am 05.04.2016 um 11:35 schrieb Andreas Tille: >> [...] >>> I admit I made no progress at the time of the mail above and I'm >>> wondering whethe

Re: libservlet2.5-java

Am 08.04.2016 um 23:41 schrieb James: > This is what 'apt -a show libservlet2.5-java' shows: > •debian/ sid/main amd64 Packages > 6.0.45+dfsg-1 > •debian-security/ jessie/updates/main amd64 Packages > 6.0.45+dfsg-1~deb8u1 > •debian/ squeeze-lts/main amd64 Packages >

Re: Need help to upgrade libnetlib-java package

Am 05.04.2016 um 11:35 schrieb Andreas Tille: [...] > I admit I made no progress at the time of the mail above and I'm > wondering whether somebody more competent than me might tackle this. > At least the libnetlib-java issue remains. :-( > > Any help would be welcome > >Andreas. Hi

Re: New steganography application

Am 03.04.2016 um 23:31 schrieb Tobias: > Hi Markus, > > thanks for your reply. I would really like to join the team and maintain the > software in the future! > I had looked at the packaging process but it seemed to me very complicated at > first sight. > That's why I asked here. > Hi Tobias,

Re: New steganography application

Am 03.04.2016 um 00:46 schrieb Tobias: > Hi all, > > I'm searching for someone in the Debian community, who would appreciate a new > easy-to-use steganography application in the Debian repositories. > It originated from a group project at our university and now we continue > working on it. >

Update of Hawtjni

Hi, I intend to upload the latest upstream release of hawtjni and I saw that Emmanuel added two new binary packages last year but they haven't been uploaded to unstable yet. Was there a reason to delay the upload and does it still exist? Cheers, Markus signature.asc Description: OpenPGP

Alioth account name change

Hi, I would like to retire my old apo-guest account on Alioth. Could one of the admins change apo-guest to apo for pkg-java please? Thanks, Markus signature.asc Description: OpenPGP digital signature

<    1   2   3   4   5   6   7   >