Bug#758516: Struts 1.2 should not be shipped with jessie

[Moritz Muehlenhoff]

Package: libstruts1.2-java
Severity: serious

Struts 1.x is EOLed upstream, it should not be included in jessie:
http://mail-archives.apache.org/mod_mbox/struts-announcements/201404.mbox/%3C535F5F52.4040108%40apache.org%3E

Cheers,
Moritz

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#635964: Update to 2.2.4

[Amr Ibrahim]

Any news? 2.2.4 has been released.
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

fastinfoset_1.2.12-1_amd64.changes REJECTED

[Thorsten Alteholz]

Dear Maintainer,

unfortunately I have to reject your package.

Files in fastinfoset/pkg/SUNWfastinfoset/* contain a statement:
 # Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
 # Use is subject to license terms.
(maybe there are other files as well)

Please mention these license terms in debian/copyright.

Thanks!
 Thorsten

===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.


__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#758086: CVE-2012-6153: Apache HttpComponents client: Hostname verification susceptible to MITM attack

[Salvatore Bonaccorso]

Hi Emanuel,

On Thu, Aug 14, 2014 at 11:43:32PM +0200, Emmanuel Bourg wrote:
> Hi Henri,
> 
> Thank you for the report.
> 
> Is there an example available somewhere of a subject improperly parsed
> by commons-httpclient/3.1-10.2? This would help backporting the fix to
> this version.

I think this is already fixed in 3.1-10.2, see the Red Hat bug as
reference and See https://bugs.debian.org/692442#56 and and following
mails.

Regards,
Salvatore

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#744369: Updating Java does not help

[Dean Hamstead]

I am seeing the exact same issue.

I am running 'sid' and merely installed via

apt-get install --no-install-recommends netbeans

dean@cliffjumper:~$ netbeans
java.lang.NoClassDefFoundError: java/nio/file/InvalidPathException
at org.openide.filesystems.FileUtil.normalizeFileImpl(Unknown Source)
at org.openide.filesystems.FileUtil.normalizeFile(Unknown Source)
at org.netbeans.core.startup.TopLogging.printSystemInfo(Unknown Source)
at org.netbeans.core.startup.TopLogging.initialize(Unknown Source)
at org.netbeans.core.startup.TopLogging.initialize(Unknown Source)
at org.netbeans.core.startup.CLIOptions.initialize(Unknown Source)
at org.netbeans.core.startup.Main.start(Unknown Source)
at org.netbeans.core.startup.TopThreadGroup.run(Unknown Source)
at java.lang.Thread.run(Thread.java:701)
Caused by: java.lang.ClassNotFoundException: 
java.nio.file.InvalidPathException

at java.net.URLClassLoader$1.run(URLClassLoader.java:217)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:205)
at java.lang.ClassLoader.loadClass(ClassLoader.java:323)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:294)
at java.lang.ClassLoader.loadClass(ClassLoader.java:268)
... 9 more
dean@cliffjumper:~$ java -version
java version "1.7.0_65"
OpenJDK Runtime Environment (IcedTea 2.5.1) (7u65-2.5.1-4)
OpenJDK 64-Bit Server VM (build 24.65-b04, mixed mode)
dean@cliffjumper:~$


On Sun, 13 Apr 2014 22:34:46 +0300 Victor Porton  
wrote:

But updating to

java version "1.7.0_51"
OpenJDK Runtime Environment (IcedTea 2.4.6) (7u51-2.4.6-1)
OpenJDK Server VM (build 24.51-b03, mixed mode)

does not help (even thought I have updated /usr/bin/java to point to 
the correct version of Java).


--
Victor Porton - http://portonvictor.org




__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.