Your message dated Mon, 11 Apr 2016 17:47:29 +0000
with message-id <e1apfvt-00030b...@franck.debian.org>
and subject line Bug#800999: fixed in jajuk 1:1.10.9+dfsg2-1
has caused the Debian Bug report #800999,
regarding jajuk: depends on obsolete libcommons-httpclient-java library
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
800999: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=800999
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: jajuk
Severity: normal
User: pkg-java-maintainers@lists.alioth.debian.org
Usertags: oldlibs libcommons-httpclient-java

Hi,

jajuk depends on libcommons-httpclient-java, which is obsolete and was
replaced by libhttpclient-java. It has reached EOL status in 2011! It is no
longer supported upstream [1] and was affected by multiple security issues in
the recent past. jajuk should be ported to the new libhttpclient-java
version, so that we can remove the old, unmaintained one. Please forward this
issue upstream, if you can't migrate the package yourself.

We would like to see libcommons-httpclient-java removed during the Stretch
release cycle but due to the large number of reverse-dependencies the outcome
depends more than ever on your help.

Please help us to accomplish this goal. We will bump this issue to important
when the list of rdeps is getting smaller and we think that the removal is
possible. We will eventually raise the severity to serious when the number
of rdeps is small.

If you have any questions don't hesitate to ask and contact us on

debian-j...@list.debian.org

Regards,

Markus

[1] https://hc.apache.org/httpclient-3.x/

[2] 
https://security-tracker.debian.org/tracker/source-package/commons-httpclient

--- End Message ---
--- Begin Message ---
Source: jajuk
Source-Version: 1:1.10.9+dfsg2-1

We believe that the bug you reported is fixed in the latest version of
jajuk, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 800...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Felix Natter <fnat...@gmx.net> (supplier of updated jajuk package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 09 Apr 2016 14:08:19 +0200
Source: jajuk
Binary: jajuk
Architecture: source all
Version: 1:1.10.9+dfsg2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Felix Natter <fnat...@gmx.net>
Description:
 jajuk      - advanced jukebox and music organizer
Closes: 781119 800999 801374
Changes:
 jajuk (1:1.10.9+dfsg2-1) unstable; urgency=medium
 .
   [ tony mancill ]
   * Moved the package to Git
 .
   [ Felix Natter ]
   * New upstream release (Closes: #800999, #781119).
   * Move to substance-7.3/insubstantial (Closes: #801374).
   * Use Files-Excluded: instead of orig-tar.*
   * Use ant build system from upcoming 1.11 (1.10 build system is broken).
   * Add libqdwizard-java dependency.
   * Add 02_jaudiotagger.patch and build with libjaudiotagger-java 2.0.x
   * Add 04_disable_update_check.patch and disable upstream's update check.
   * Switch Java runtime dependencies from Java 6/7 to Java 7/8.
   * Require trident at runtime (recent substance requires this).
   * Bump to Standards-Version 3.9.8 (no changes).
   * Use github tarball instead of SF one (the SF one is severely broken).
   * Add myself to Uploaders.
   * Update copyright.
   * Remove files with unclear license, apply upstream patch from
     upcoming 1.11 to replace this (06_scrolling_stuff.patch).
 .
   [ Markus Koschany ]
   * Install jajuk icon to /usr/share/icons/hicolor directory.
Checksums-Sha1:
 6bdc3513f40a955ef422dca9d9e072ae478b8800 2861 jajuk_1.10.9+dfsg2-1.dsc
 0b410765f32e48de0692b0a9d1758700b338944c 2900755 jajuk_1.10.9+dfsg2.orig.tar.gz
 3337b7457f1d1a2f74b1769a4b2373dfdb80c75c 19260 
jajuk_1.10.9+dfsg2-1.debian.tar.xz
 bb4c623b0bc491fdc50e7e522bbf21cbd8574d07 2351422 jajuk_1.10.9+dfsg2-1_all.deb
Checksums-Sha256:
 a3fdc61924e95bb38343040d6fbfc2985fb582b71a687397cc99c53cc411feb2 2861 
jajuk_1.10.9+dfsg2-1.dsc
 a83a8e5aca5e5c665e82d6b415bd6598f65a12bd16070f81d679dcc616dab7ec 2900755 
jajuk_1.10.9+dfsg2.orig.tar.gz
 cf56f0ad33883eb87bb5d10e86e9fc2368b022b8a6ee1a2f59b0b0ecaab84438 19260 
jajuk_1.10.9+dfsg2-1.debian.tar.xz
 fd3689ff4d780293b595022f94984b8bc99f14ca0095875f136b46ef412dd4c4 2351422 
jajuk_1.10.9+dfsg2-1_all.deb
Files:
 00a0e8939ea863b6affeadef858aae08 2861 sound optional jajuk_1.10.9+dfsg2-1.dsc
 4444bc895da95a3f8b5090b217b62f0a 2900755 sound optional 
jajuk_1.10.9+dfsg2.orig.tar.gz
 003d1da0a929192ab75fd032459cb086 19260 sound optional 
jajuk_1.10.9+dfsg2-1.debian.tar.xz
 477a107c9ff1eb6276eca7010d59ffae 2351422 sound optional 
jajuk_1.10.9+dfsg2-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=pJai
-----END PGP SIGNATURE-----

--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to