Bug#451140: eclipse fails to start
On Fri, Nov 30, 2007 at 10:15:55PM +0800, darren wrote: [EMAIL PROTECTED]:~$ dpkg -l |grep libc6 ii libc62.7-3GNU C Library: Shared libraries ii libc6-dev2.7-3GNU C Library: Development Libraries and Hea ii libc6-i686 2.7-3GNU C Library: Shared libraries [i686 optimi [EMAIL PROTECTED]:~$ mount /dev/hda3 on / type ext3 (rw,errors=remount-ro) the problem still exists. Can you please try to delete/rename/move your workspace AND ~/.eclipse directory and retry? Cheers, Michael ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#453509: marked as done (doesn't start with gcj jvm)
Your message dated Fri, 30 Nov 2007 20:23:16 +0100 with message-id [EMAIL PROTECTED] and subject line Bug#453509: doesn't start with gcj jvm has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) ---BeginMessage--- Package: eclipse Version: 3.2.2-4 Severity: grave Hi, I had problems launching eclipse. Every time I tried, the java process was using up to 80% of the memory. % eclipse -debug searching for compatible vm... testing /usr/lib/jvm/java-gcj...found Could not create /usr/local/lib/eclipse/.eclipseextension. Please run as root: touch /usr/local/lib/eclipse/.eclipseextension chmod 2775 /usr/local/lib/eclipse/.eclipseextension chown root:staff /usr/local/lib/eclipse/.eclipseextension Start VM: /usr/lib/jvm/java-gcj/bin/java -Djava.library.path=/usr/lib/jni -Dgnu.gcj.precompiled.db.path=/var/lib/gcj-4.2/classmap.db -Dgnu.gcj.runtime.VMClassLoader.library_control=never -Dosgi.locking=none -jar /usr/lib/eclipse/startup.jar -os linux -ws gtk -arch x86_64 -launcher /usr/lib/eclipse/eclipse -name Eclipse -showsplash 600 -exitdata 228007 -install /usr/lib/eclipse -debug -vm /usr/lib/jvm/java-gcj/bin/java -vmargs -Djava.library.path=/usr/lib/jni -Dgnu.gcj.precompiled.db.path=/var/lib/gcj-4.2/classmap.db -Dgnu.gcj.runtime.VMClassLoader.library_control=never -Dosgi.locking=none -jar /usr/lib/eclipse/startup.jar Install location: file:/usr/lib/eclipse/ Configuration file: file:/usr/lib/eclipse/configuration/config.ini loaded Configuration location: file:/home/nox/.eclipse/org.eclipse.platform_3.2.0/configuration/ Configuration file: file:/home/nox/.eclipse/org.eclipse.platform_3.2.0/configuration/config.ini not found or not read Shared configuration location: file:/usr/lib/eclipse/configuration/ Framework located: file:/usr/lib/eclipse/plugins/org.eclipse.osgi_3.2.2.R32x_v20070118.jar Framework classpath: file:/usr/lib/eclipse/plugins/org.eclipse.osgi_3.2.2.R32x_v20070118.jar Splash location: /usr/lib/eclipse/plugins/org.eclipse.platform_3.2.2.r322_v20070117b/splash.bmp runCommand: /usr/lib/eclipse/eclipse-nameEclipse-showsplash600/usr/lib/eclipse/plugins/org.eclipse.platform_3.2.2.r322_v20070117b/splash.bmp Debug options: file:/home/nox/.options not found Time to load bundles: 3 GC Warning: Out of Memory! Returning NIL! Then I tried with the sun jvm with this command : % eclipse -debug -consolelog -vm /usr/lib/jvm/java-6-sun/bin/java and it started correctly. I don't know if it's eclipse that is involved or gcj but i didn't meet any other problem with gcj so... Thanks. -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.22-3-amd64 (SMP w/1 CPU core) Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Shell: /bin/sh linked to /bin/bash Versions of packages eclipse depends on: ii eclipse-jdt 3.2.2-4Java Development Tools plug-ins fo ii eclipse-pde 3.2.2-4Plug-in Development Environment to ii eclipse-source3.2.2-4Eclipse source code plug-ins ii zenity2.20.0-2 Display graphical dialog boxes fro Versions of packages eclipse recommends: ii eclipse-gcj 3.2.2-4Native Eclipse run with GCJ -- no debconf information ---End Message--- ---BeginMessage--- On Fri, Nov 30, 2007 at 06:50:04PM +0100, NoX wrote: It's now running fine, thanks :) Closing this bug then. Thanks for your report. Cheers, Michael ---End Message--- ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#453766: rhino: Bashism lead to FTBFS
Package: rhino Version: 1.6.R7-1 Severity: minor Tags: patch User: [EMAIL PROTECTED] Usertags: origin-ubuntu hardy ubuntu-patch rhino has a bashism in debian/rules which causes FTBFS on system with /bin/sh linked to /bin/dash. Even if Debian is not affected, it could be worth fixing it for compatibility purposes. In Ubuntu, we've applied the attached patch to achieve the following: * debian/rules: fix bashism which caused FTBFS We thought you might be interested in doing the same. -- System Information: Debian Release: lenny/sid APT prefers gutsy-updates APT policy: (500, 'gutsy-updates'), (500, 'gutsy-security'), (500, 'gutsy-backports'), (500, 'gutsy') Architecture: i386 (i686) Kernel: Linux 2.6.22-14-generic (SMP w/1 CPU core) Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash diff -u rhino-1.6.R7/debian/rules rhino-1.6.R7/debian/rules --- rhino-1.6.R7/debian/rules +++ rhino-1.6.R7/debian/rules @@ -32,7 +32,10 @@ # build.xml from attempting to download it. configure/rhino:: mkdir -p toolsrc/org/mozilla/javascript/tools/debugger/downloaded - cp debian/src_from_treetable_article_see_bug409629/{AbstractCellEditor.java,JTreeTable.java,TreeTableModel.java,TreeTableModelAdapter.java} toolsrc/org/mozilla/javascript/tools/debugger/downloaded/ + cp debian/src_from_treetable_article_see_bug409629/AbstractCellEditor.java toolsrc/org/mozilla/javascript/tools/debugger/downloaded/ + cp debian/src_from_treetable_article_see_bug409629/JTreeTable.java toolsrc/org/mozilla/javascript/tools/debugger/downloaded/ + cp debian/src_from_treetable_article_see_bug409629/TreeTableModel.java toolsrc/org/mozilla/javascript/tools/debugger/downloaded/ + cp debian/src_from_treetable_article_see_bug409629/TreeTableModelAdapter.java toolsrc/org/mozilla/javascript/tools/debugger/downloaded/ install/rhino:: mkdir -p $(JAVALIBDIR) ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#453518: jajuk: muted audio on every track until I adjust the volume slider
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Varun, This build fixed my issue - thanks! By the way, I noticed yesterday (before loading the SVN version) that I could also unmute the audio by adjusting the position slider as well, if that helps track down the bug. Cheers, Tony Varun Hiremath wrote: Hi Tony, On Thu, 29 Nov, 2007 at 04:06:40PM -0800, tony mancill wrote: Package: jajuk Version: 1.4.3~rc3+svn3068-1 Severity: normal Thanks for trying Jajuk. I'm giving jajuk a try. Everything looks pretty good, but I have to adjust the volume before I can hear any playback, and I have to do this for every single track. For example, if track A is playing and ends, track B will be start playing (but will be silent) until I move the volume slider. It's as if every track starts muted (but doesn't appear to be muted). As far as I know I have a normal ALSA setup - a single onboard card, etc - and haven't run into this problem with any other audio players. Any ideas? Well, I am also on i386 and use ALSA but I don't have any problems with volume in Jajuk. Upstream recently fixed some issues related to volume slider etc in Jajuk and 1.4.3 version was released yesterday. I have built the new version and uploaded it here: http://varun.travisbsd.org/debian/jajuk_1.4.3+svn3076-1_all.deb Do you mind giving it a try? If this new version also doesn't help, please let me know so that I can forward your report upstream. Thanks Varun -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHUEPZpdwBkPlyvgMRAihGAJ400vdtoY+rXYW4Y3YlwyA6H9c0xgCfQ9De ZDiXNokaCY0QRbQsIM2XfS4= =zfMC -END PGP SIGNATURE- ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Processed: tagging 447469
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.11 tags 447469 + patch Bug#447469: javahelp2: FTBFS: class org.apache.tools.ant.taskdefs.optional.depend.Depend was not found Tags were: pending Tags added: patch End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
checkstyle 4.3+dfsg1-2 MIGRATED to testing
FYI: The status of the checkstyle source package in Debian's testing distribution has changed. Previous version: 4.3+dfsg1-1 Current version: 4.3+dfsg1-2 -- This email is automatically generated; [EMAIL PROTECTED] is responsible. See http://people.debian.org/~henning/trille/ for more information. ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#447469: Patch to fix this bug
tags 447469 +pending thanks Hi, Please find attahced patch to fix this bug. Also, libjdic-java is now available in Debian. Regards Varun -- Varun Hiremath Undergraduate Student, Aerospace Engineering Department, Indian Institute of Technology Madras, Chennai, India --- Homepage : http://varun.travisbsd.org diff -urN javahelp2-2.0.05.orig/debian/changelog javahelp2-2.0.05/debian/changelog --- javahelp2-2.0.05.orig/debian/changelog 2007-11-30 21:26:26.0 +0530 +++ javahelp2-2.0.05/debian/changelog 2007-11-30 21:33:10.0 +0530 @@ -1,3 +1,14 @@ +javahelp2 (2.0.05-2) unstable; urgency=low + + * debian/control: ++ Build-Depend on ant-options instead of ant (Closes: #447469) ++ Add libjdic-java to Build-Depends-Indep ++ Add Homepage, Vcs-{Svn, Browser} headers + * debian/rules: ++ Create symlink for jdic.jar + + -- Varun Hiremath [EMAIL PROTECTED] Fri, 30 Nov 2007 21:30:13 +0530 + javahelp2 (2.0.05-1) unstable; urgency=low * Initial version (Closes: #432773). diff -urN javahelp2-2.0.05.orig/debian/compat javahelp2-2.0.05/debian/compat --- javahelp2-2.0.05.orig/debian/compat 2007-11-30 21:26:26.0 +0530 +++ javahelp2-2.0.05/debian/compat 2007-11-30 21:33:10.0 +0530 @@ -1 +1 @@ -4 +5 diff -urN javahelp2-2.0.05.orig/debian/control javahelp2-2.0.05/debian/control --- javahelp2-2.0.05.orig/debian/control2007-11-30 21:26:26.0 +0530 +++ javahelp2-2.0.05/debian/control 2007-11-30 21:33:10.0 +0530 @@ -3,9 +3,13 @@ Priority: optional Maintainer: Debian Java Maintainers pkg-java-maintainers@lists.alioth.debian.org Uploaders: Marek Slama [EMAIL PROTECTED] -Build-Depends: cdbs (= 0.4.8), debhelper (= 4.2.0) -Build-Depends-Indep: ant, java-gcj-compat-dev, libtomcat5.5-java, libservlet2.4-java, unzip +Build-Depends: cdbs, debhelper (= 5) +Build-Depends-Indep: ant-optional, java-gcj-compat-dev, + libtomcat5.5-java, libservlet2.4-java, libjdic-java, unzip Standards-Version: 3.7.2 +Homepage: http://javahelp.dev.java.net +Vcs-Svn: svn://svn.debian.org/svn/pkg-java/trunk/javahelp2 +Vcs-Browser: http://svn.debian.org/wsvn/pkg-java/trunk/javahelp2 Package: javahelp2 Architecture: all @@ -23,9 +27,7 @@ entirely in the Java programming language. The JavaHelp system reference implementation, based on the Java Foundation Classes (JFC, also known as Swing), provides a standard interface that enables both application - developers and authors to add online help to their applications. - . - Homepage: http://javahelp.dev.java.net + developers and authors to add online help to their applications. Package: javahelp2-doc Architecture: all @@ -44,5 +46,3 @@ developers and authors to add online help to their applications. . This package contains Javadoc API documentation. - . - Homepage: http://javahelp.dev.java.net diff -urN javahelp2-2.0.05.orig/debian/rules javahelp2-2.0.05/debian/rules --- javahelp2-2.0.05.orig/debian/rules 2007-11-30 21:26:26.0 +0530 +++ javahelp2-2.0.05/debian/rules 2007-11-30 21:33:10.0 +0530 @@ -25,8 +25,7 @@ mkdir -p $(DEB_SRCDIR)/javahelp_nbproject/lib ln -s -f /usr/share/java/servlet-api.jar $(DEB_SRCDIR)/javahelp_nbproject/lib/servlet-api.jar ln -s -f /usr/share/java/jsp-api.jar $(DEB_SRCDIR)/javahelp_nbproject/lib/jsp-api.jar - #Remove class uncompilable without JDIC - rm -f $(DEB_SRCDIR)/jhMaster/JavaHelp/src/new/javax/help/plaf/basic/BasicNativeContentViewerUI.java + ln -s -f /usr/share/java/jdic.jar $(DEB_SRCDIR)/javahelp_nbproject/lib/jdic.jar #Build javahelp target 'release' is for jars, target 'javadoc' is for javadoc ant -f $(DEB_SRCDIR)/javahelp_nbproject/build.xml -Djdic-jar-present=true -Djdic-zip-present=true \ -Ddist.javadoc.dir=dist/lib/api \ ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Processed: Patch to fix this bug
Processing commands for [EMAIL PROTECTED]: tags 447469 +pending Bug#447469: javahelp2: FTBFS: class org.apache.tools.ant.taskdefs.optional.depend.Depend was not found There were no tags set. Tags added: pending thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
libquartz-java_1.6.0-2_i386.changes is NEW
(new) libquartz-java_1.6.0-2.diff.gz optional contrib/libs (new) libquartz-java_1.6.0-2.dsc optional contrib/libs (new) libquartz-java_1.6.0-2_all.deb optional contrib/libs open source job scheduling system Quartz is a full-featured, open source job scheduling system that can be integrated with, or used along side virtually any J2EE or J2SE application - from the smallest stand-alone application to the largest e-commerce system. Quartz can be used to create simple or complex schedules for executing tens, hundreds, or even tens-of-thousands of jobs; jobs whose tasks are defined as standard Java components or EJBs. The Quartz Scheduler includes many enterprise-class features, such as JTA transactions and clustering. (new) libquartz-java_1.6.0.orig.tar.gz optional contrib/libs Changes: libquartz-java (1.6.0-2) unstable; urgency=low . * Move package to contrib because of Build-Depends: glassfish-javaee. * Use upstream provided build.xml. Override entries for your package: Announcing to [EMAIL PROTECTED] Your package contains new components which requires manual editing of the override file. It is ok otherwise, so please be patient. New packages are usually added to the override file about once a week. You may have gotten the distribution wrong. You'll get warnings above if files already exist in other distributions. ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#268002: Reopening bugs closed by spam
reopen 268002 reopen 286656 thanks Reopening bugs closed by spam. Cheers, Michael ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#268002: marked as done (tomcat4: server.xml is publically readable so any user can shutdown)
Your message dated Fri, 30 Nov 2007 08:38:14 -0200 with message-id [EMAIL PROTECTED] and subject line Fw: Tudo de graca has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) ---BeginMessage--- Package: tomcat4 Version: 4.1.30-6 Severity: wishlist At present, /etc/tomcat4/server.xml is mode 644. This means that any legitimate user or rogue process has access to the shutdown string and can shut tomcat down. This is a minor DoS and something of a corner case (it affects tomcat instances running on large multi-user boxes and stymies hardening measures designed to allow a server to play hurt (continue giving partial service when partially compromised)), but still an interesting one. This could be overcome by creating a tomcat4 group, running the tomcat instance with this group ID, changing the group ownership of server.xml to tomcat4 and changing the mode to 640. This provides both confidentiality of the shutdown secret and prevents a compromised tomcat instance from manipulating its own configuration (because while the tomcat4 group can read the file, only root can write it). - Raz -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.6-1-686 Locale: LANG=C, LC_CTYPE=C Versions of packages tomcat4 depends on: ii adduser 3.59Add and remove users and groups ii apache-utils 1.3.31-3Utility programs for webservers ii eclipse-javac [java-compiler 2.1.3-4 Eclipse Java compiler and ant plug ii j2re1.3 [java-virtual-machin 1.3.1.02b-2 Blackdown Java(TM) 2 Runtime Envir ii j2re1.4 [java-virtual-machin 1.4.1-6 Blackdown Java(TM) 2 Runtime Envir ii j2sdk1.3 [java-compiler] 1.3.1.02b-2 Blackdown Java(TM) 2 SDK, Standard ii j2sdk1.4 [java-compiler] 1.4.1-6 Blackdown Java(TM) 2 SDK, Standard pn libtomcat4-java Not found. -- no debconf information ---End Message--- ---BeginMessage--- Pessoal, recebi este e-mail e estou repassando... --- Vocês sabiam que na internet existem sites que oferecem material de qualidade e de graça? Encontrei um site na internet que disponibiliza muito material de qualidade e de GRAÇA. O site é www.tudodegraca.4d2.net Algumas apostilas oferecidas são: Kit de Mágicas Guia de Sedução Curso de Auto-Hipnose Curso de Desenho Ringtones para celular e várias outras... Esse é um material GRATUITO de qualidade que está praticamente esquecido na internet. Vamos repassar essa oportunidade aos nossos amigos e avisar o maior número de pessoas! Repetindo, o site é: www.tudodegraca.4d2.net Abraços ---End Message--- ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
tomcat5.5_5.5.25-2_amd64.changes ACCEPTED
Accepted: libtomcat5.5-java_5.5.25-2_all.deb to pool/main/t/tomcat5.5/libtomcat5.5-java_5.5.25-2_all.deb tomcat5.5-admin_5.5.25-2_all.deb to pool/main/t/tomcat5.5/tomcat5.5-admin_5.5.25-2_all.deb tomcat5.5-webapps_5.5.25-2_all.deb to pool/main/t/tomcat5.5/tomcat5.5-webapps_5.5.25-2_all.deb tomcat5.5_5.5.25-2.diff.gz to pool/main/t/tomcat5.5/tomcat5.5_5.5.25-2.diff.gz tomcat5.5_5.5.25-2.dsc to pool/main/t/tomcat5.5/tomcat5.5_5.5.25-2.dsc tomcat5.5_5.5.25-2_all.deb to pool/main/t/tomcat5.5/tomcat5.5_5.5.25-2_all.deb Override entries for your package: libtomcat5.5-java_5.5.25-2_all.deb - optional web tomcat5.5-admin_5.5.25-2_all.deb - optional web tomcat5.5-webapps_5.5.25-2_all.deb - optional web tomcat5.5_5.5.25-2.dsc - source web tomcat5.5_5.5.25-2_all.deb - optional web Announcing to [EMAIL PROTECTED] Closing bugs: 448664 452366 Thank you for your contribution to Debian. ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
libpicocontainer-java_1.3-1_i386.changes is NEW
(new) libpicocontainer-java_1.3-1.diff.gz optional libs (new) libpicocontainer-java_1.3-1.dsc optional libs (new) libpicocontainer-java_1.3-1_all.deb optional libs Java library implementing the Dependency Injection pattern PicoContainer is a highly embeddable full service Inversion of Control (IoC) container for components honour the Dependency Injection pattern. It can be used as a lightweight alternative to Sun's J2EE patterns for web applications or general solutions. . Despite it being very compact in size (the core is ~128K and it has no mandatory dependencies outside the JDK), PicoContainer supports different dependency injection types (Constructor, Setter, Annotated Field and Method) and offers multiple lifecycle and monitoring strategies. (new) libpicocontainer-java_1.3.orig.tar.gz optional libs Changes: libpicocontainer-java (1.3-1) unstable; urgency=low . * initial version (Closes: #453469) Override entries for your package: Announcing to [EMAIL PROTECTED] Closing bugs: 453469 Your package contains new components which requires manual editing of the override file. It is ok otherwise, so please be patient. New packages are usually added to the override file about once a week. You may have gotten the distribution wrong. You'll get warnings above if files already exist in other distributions. ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#450718: Please package version 5.1.5 of Connector/J
On Fri, Nov 09, 2007 at 07:49:43AM -0800, Marc Petit-Huguenin wrote: Package: libmysql-java Version: 5.0.4+dfsg-3 The last version of Connector/J is 5.1.5. We cant update currently as this new version needs Java 6 and we have no compatible implementation in main currently. We will propabaly be able to include it when icedtea/openjdk is in. Cheers, Michael ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#448664: marked as done (CVE-2007-5461 absolute path traversal vulnerability)
Your message dated Fri, 30 Nov 2007 10:17:04 + with message-id [EMAIL PROTECTED] and subject line Bug#448664: fixed in tomcat5.5 5.5.25-2 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) ---BeginMessage--- Package: tomcat5.5 Severity: important Tags: security Hi, the following CVE (Common Vulnerabilities Exposures) id was published for tomcat5.5. CVE-2007-5461[0]: | Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through | 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, | under certain configurations, allows remote authenticated users to | read arbitrary files via a WebDAV write request that specifies an | entity with a SYSTEM tag. If you fix this vulnerability please also include the CVE id in your changelog entry. For further information: [0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461 Kind regards Nico -- Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted. pgphpqnVdgjwE.pgp Description: PGP signature ---End Message--- ---BeginMessage--- Source: tomcat5.5 Source-Version: 5.5.25-2 We believe that the bug you reported is fixed in the latest version of tomcat5.5, which is due to be installed in the Debian FTP archive: libtomcat5.5-java_5.5.25-2_all.deb to pool/main/t/tomcat5.5/libtomcat5.5-java_5.5.25-2_all.deb tomcat5.5-admin_5.5.25-2_all.deb to pool/main/t/tomcat5.5/tomcat5.5-admin_5.5.25-2_all.deb tomcat5.5-webapps_5.5.25-2_all.deb to pool/main/t/tomcat5.5/tomcat5.5-webapps_5.5.25-2_all.deb tomcat5.5_5.5.25-2.diff.gz to pool/main/t/tomcat5.5/tomcat5.5_5.5.25-2.diff.gz tomcat5.5_5.5.25-2.dsc to pool/main/t/tomcat5.5/tomcat5.5_5.5.25-2.dsc tomcat5.5_5.5.25-2_all.deb to pool/main/t/tomcat5.5/tomcat5.5_5.5.25-2_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Michael Koch [EMAIL PROTECTED] (supplier of updated tomcat5.5 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.7 Date: Fri, 30 Nov 2007 10:46:33 +0100 Source: tomcat5.5 Binary: libtomcat5.5-java tomcat5.5 tomcat5.5-admin tomcat5.5-webapps Architecture: source all Version: 5.5.25-2 Distribution: unstable Urgency: high Maintainer: Debian Java Maintainers pkg-java-maintainers@lists.alioth.debian.org Changed-By: Michael Koch [EMAIL PROTECTED] Description: libtomcat5.5-java - Java Servlet engine -- core libraries tomcat5.5 - Servlet and JSP engine tomcat5.5-admin - Java Servlet engine -- admin manager web interfaces tomcat5.5-webapps - Java Servlet engine -- documentation and example web applications Closes: 448664 452366 Changes: tomcat5.5 (5.5.25-2) unstable; urgency=high . [ Michael Koch ] CVE-2007-5461: * Fix absolute path traversal vulnerability. Closes: #448664. . [ Marcus Better ] * Add required commons-io symlink to the admin webapp, which fixes WAR file uploads. (Closes: #452366) * debian/control: Use the new Homepage and Vcs-* fields. * debian/NEWS: Remove outdated entry. Files: abab7824bd1a66070e2205d9b037c470 1330 web optional tomcat5.5_5.5.25-2.dsc 7dbc5ca424d9fe25895ce3596f84df8a 31577 web optional tomcat5.5_5.5.25-2.diff.gz 5d8b8ff8ef1ff64cd99e1a26dc4ba366 60928 web optional tomcat5.5_5.5.25-2_all.deb 61c8039e098eb021120da4dea70eff4f 2416538 web optional libtomcat5.5-java_5.5.25-2_all.deb 5bd4109cca9d3be8ea9c0a45ffe5ecc0 1486354 web optional tomcat5.5-webapps_5.5.25-2_all.deb 88cf1ff55c9283262f23655545fb2c0c 1135614 web optional tomcat5.5-admin_5.5.25-2_all.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHT+KFWSOgCCdjSDsRAoZeAJ0cAulaIWrbqb5YZ2DBO79GVDPWvwCginVe Z2aA65NSY21nGvFebYRgrms= =ZAd3 -END PGP SIGNATURE- ---End Message--- ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
libquartz-java_1.6.0-1_i386.changes REJECTED
Hi Maintainer, rejected, one of your Build-Depends is in contrib, you cant go to main. (glassfish-javaee) -- bye Joerg === If you don't understand why your files were rejected, or if the override file requires editing, reply to this email. ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers
Bug#453777: libxml-commons-resolver1.1-java: Version 1.2 is available
Package: libxml-commons-resolver1.1-java Version: 1.1-8 Severity: wishlist Version 1.2 is available in http://xml.apache.org/mirrors.cgi with release notes in http://xml.apache.org/commons/components/resolver/resolver-release-notes.html . It would be nice if it's packaged. Regards, Ognyan Kulev ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers