[SCM] jetty8 packaging branch, master, updated. upstream/8.1.3-21-g58d1faa

2012-05-13 Thread Niels Thykier
The following commit has been merged in the master branch:
commit 58d1faa0f97e660bd9c7de96a889b8b3685ebac3
Author: Niels Thykier ni...@thykier.net
Date:   Sun May 13 14:54:16 2012 +0200

Set dist to unstable

Signed-off-by: Niels Thykier ni...@thykier.net

diff --git a/debian/changelog b/debian/changelog
index 6933fbe..4ddc53e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,9 @@
-jetty8 (8.1.3-1) UNRELEASED; urgency=low
+jetty8 (8.1.3-1) unstable; urgency=low
 
   * New upstream release.
   * Bump Standards-Version to 3.9.3.
 
- -- Jakub Adam jakub.a...@ktknet.cz  Thu, 01 Mar 2012 21:05:15 +0100
+ -- Jakub Adam jakub.a...@ktknet.cz  Sun, 13 May 2012 14:54:06 +0200
 
 jetty (6.1.24-6) unstable; urgency=medium
 

-- 
jetty8 packaging

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits


[SCM] jetty8 packaging annotated tag, debian/8.1.3-1, created. debian/8.1.3-1

2012-05-13 Thread Niels Thykier
The annotated tag, debian/8.1.3-1 has been created
at  8e6ddeb6508e9d755bd03d43dc98e63d983ea1f2 (tag)
   tagging  58d1faa0f97e660bd9c7de96a889b8b3685ebac3 (commit)
  replaces  upstream/8.1.3
 tagged by  Niels Thykier
on  Sun May 13 15:23:17 2012 +0200

- Shortlog 
Release jetty8/8.1.3-1 into unstable
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iQIcBAABCAAGBQJPr7XQAAoJEAVLu599gGRCim8P/jc+EgEVMjiBGtl+jOAQ95FJ
I+OzfwztILh3aDrErcn3FMnSZ4+/d0oGo1ZjYVjLVZtTLy/gV3MjtROpDncdcxWr
bWmHnyaET21UJMB9RE5U02/gJVJhFaafxCsYciPHRCIMaeQw6aMYeSq6gSj0H4v2
gy/8W3iQn+VgnlzMvDNmv864sRWE+xnYhiij2Bji4g55pMWCrX/2hFYQ1/SBMKGK
anzUT0vnfnRnxwvFnA/Qujnt80BtEaK+tjWnyE2iwj37pw0f01OjD9WK9+rVbuhB
eAuPme+IwWZL0HtKrt/OKqg58Lhxnl8WMyEURFzfk9VI3lMG4Tiifx3uTYrHqZyh
JnmyedSbww6WCLZ1XxU++ySAXUx4kB3AEGLqWrYMzzBNgUOfgh/x/BqEedG+wmHz
vZDNEuUotiD0ZsG2oep+LJ/xIfBfX7DMtXG2TMxV1mTWxb89l5prkpizJAiUvJDX
rtah2ZRIBJyStfaquLL8hHRaWQ2wPnjT2ohJzkwLO1wWpfPnS16ypNrN3Ag7Dit9
e0dIlwWFOiXUe8R7wXS1mlsw/x4B/WizKfh9+RyZP3A1H0DZ0ASdkQlP+mEtStZ3
E4FuROCKsgYNn1xCIPC9arszJoEBz+GKtovCf30JTm1Cx61wQesxk1BLSFyU5iPM
uauKZJsuunrT3RwTVCg1
=geXb
-END PGP SIGNATURE-

Jakub Adam (20):
  Imported debian directory from Jetty 6 packaging SVN repo
  Remove *.patch from .gitignore
  jetty.init: Fix character class syntax
  Use C.UTF-8 locale for build
  Updated debian directory
  Install files to jetty8 directories to allow installation alongside 
jetty6
  Add build patches
  Build documentation package
  Bump Standards-Version to 3.9.3
  Updated Vcs-* fields
  Clear Uploaders list
  Removed obsolete d/orig-tar.sh
  Add libmaven-javadoc-plugin-java to Build-Depends
  Updated d/copyright
  Update d/watch
  Merge tag 'upstream/8.1.3'
  Updated d/changelog for new upstream release
  Remove useless d/libjetty8-extra-java.dirs
  Fix lintian warning init.d-script-does-not-provide-itself
  d/libjetty8-java.poms: removed POMs not needed in build

Niels Thykier (1):
  Set dist to unstable

---

-- 
jetty8 packaging

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits


Processing of jetty8_8.1.3-1_amd64.changes

2012-05-13 Thread Debian FTP Masters
jetty8_8.1.3-1_amd64.changes uploaded successfully to localhost
along with the files:
  jetty8_8.1.3-1.dsc
  jetty8_8.1.3.orig.tar.gz
  jetty8_8.1.3-1.debian.tar.gz
  libjetty8-java_8.1.3-1_all.deb
  libjetty8-java-doc_8.1.3-1_all.deb
  libjetty8-extra-java_8.1.3-1_all.deb
  jetty8_8.1.3-1_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


jetty8_8.1.3-1_amd64.changes is NEW

2012-05-13 Thread Debian FTP Masters
(new) jetty8_8.1.3-1.debian.tar.gz optional java
(new) jetty8_8.1.3-1.dsc optional java
(new) jetty8_8.1.3-1_all.deb optional java
Java servlet engine and webserver
 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.
(new) jetty8_8.1.3.orig.tar.gz optional java
(new) libjetty8-extra-java_8.1.3-1_all.deb optional java
Java servlet engine and webserver -- extra libraries
 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.
 The extra libraries include jetty-management, jetty-naming,
 jetty-servlet-tester, jetty-ajp, jetty-java5-threadpool,
 jetty-client, jetty-rewrite-handler, jetty-plus, jetty-annotations
(new) libjetty8-java-doc_8.1.3-1_all.deb optional doc
Javadoc for the Jetty API
 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.
 .
 This package contains the Javadoc for libjetty-java.
(new) libjetty8-java_8.1.3-1_all.deb optional java
Java servlet engine and webserver -- core libraries
 Jetty is an Open Source HTTP Servlet Server written in 100% Java.
 It is designed to be light weight, high performance, embeddable,
 extensible and flexible, thus making it an ideal platform for serving
 dynamic HTTP requests from any Java application.


Changes:
jetty8 (8.1.3-1) unstable; urgency=low
 .
  * New upstream release.
  * Bump Standards-Version to 3.9.3.


Override entries for your package:

Announcing to debian-devel-chan...@lists.debian.org


Your package contains new components which requires manual editing of
the override file.  It is ok otherwise, so please be patient.  New
packages are usually added to the override file about once a week.

You may have gotten the distribution wrong.  You'll get warnings above
if files already exist in other distributions.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#670756: Tuxguitar does not start

2012-05-13 Thread Niels Thykier
On 2012-04-29 12:38, Jakub Adam wrote:
 Hi Grant,
 
 from the fact that SWT is looking for swt-cairo-gtk-3555 I suspect you have
 still libswt-gtk-3.5-java and libswt-gtk-3.5-java-jni installed.
 Removing these
 packages should solve the problem.
 
 Regards,
 
 Jakub
 
 
 
 __
 This is the maintainer address of Debian's Java team
 http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers.
 Please use
 debian-j...@lists.debian.org for discussions and questions.

Hi Grant,

I am not sure if you saw the mail above[1], but could you please confirm
whether the above is true?

~Niels

[1] As far as I can tell, you were not CC'ed and the BTS does not send
follow ups to reporters by default.



__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


java-xmlbuilder 0.4-2 MIGRATED to testing

2012-05-13 Thread Debian testing watch
FYI: The status of the java-xmlbuilder source package
in Debian's testing distribution has changed.

  Previous version: 0.4-1
  Current version:  0.4-2

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


jenkins 1.447.1+dfsg-1 MIGRATED to testing

2012-05-13 Thread Debian testing watch
FYI: The status of the jenkins source package
in Debian's testing distribution has changed.

  Previous version: 1.424.6+dfsg-1
  Current version:  1.447.1+dfsg-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


cdk 1:1.2.10-3 MIGRATED to testing

2012-05-13 Thread Debian testing watch
FYI: The status of the cdk source package
in Debian's testing distribution has changed.

  Previous version: 1:1.2.10-2
  Current version:  1:1.2.10-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#611130: CVE-2010-2087

2012-05-13 Thread Steve McIntyre
On Sun, Oct 02, 2011 at 05:53:48PM -0430, Miguel Landaeta wrote:
#tag 611130 + idontgiveadamn
tag 611130 + moreinfo
kthxbye

Upstream doesn't answer any request about this bug.

I sent emails, I posted in their discussion forum and even joined their
irc channel to ask a couple of question about this bug. I didn't receive
any answer, I can say I was completely ignored.

There is no info at Mitre website and AFAIK this issue is not fixed in
any other free software distribution.

I don't have time neither interest on this, good luck to anybody
interested in fixing this bug. Be aware of uncooperative upstream.

Given this, this package looks like a prime candidate for removal from
the archive to be honest. Thoughts?

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
Who needs computer imagery when you've got Brian Blessed?




__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#611138: CVE-2010-4438

2012-05-13 Thread Steve McIntyre
On Wed, Jan 04, 2012 at 09:12:31PM +0100, Damien Raude-Morvan wrote:
On 01/01/2012 19:47, Julien Cristau wrote:
Hi,

Hi Julien,

On Wed, Jan 26, 2011 at 19:46:32 +0100, Damien Raude-Morvan wrote:

So I don't think Debian package is affected by this issue, but we'll have to
wait until Oracle/Glassfish team publish some source code to confirm ths.

Did that happen in the last year?

Sadly, no :/ I must admit that Oracle does not publish details of its
fixes so it's hard to confirm firmly what's component is exactly
impacted.

I'll try to revive my contact @Oracle to get some feedback on this
issue (on future security issues).

Hi,

Any news on this?

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
This dress doesn't reverse. -- Alden Spiess




__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


msv 2009.1+dfsg1-3 MIGRATED to testing

2012-05-13 Thread Debian testing watch
FYI: The status of the msv source package
in Debian's testing distribution has changed.

  Previous version: 2009.1+dfsg1-2
  Current version:  2009.1+dfsg1-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


[SCM] eclipse-mylyn - Plug-in for eclipse - Debian package. branch, master, updated. debian/3.6.5+dfsg1-1-14-gfee850c

2012-05-13 Thread Jakub Adam
The following commit has been merged in the master branch:
commit fee850c37891effc3f80ec8bd499859489c3ecb4
Author: Jakub Adam jakub.a...@ktknet.cz
Date:   Mon Apr 2 20:51:43 2012 +0200

Update build dependences

Add libhttpclient-java.

diff --git a/debian/control b/debian/control
index 4b4735d..3ec2416 100644
--- a/debian/control
+++ b/debian/control
@@ -16,9 +16,12 @@ Build-Depends: debhelper (= 8~),
libcommons-lang-java,
libgnumail-java (= 1.1.2-6),
libgoogle-gson-java,
+   libhttpclient-java (= 4.1.1-2),
+   libhttpcore-java (= 4.1.4-2),
libjaxme-java (= 0.5.2+dfsg-6),
libjaxp1.3-java (= 1.3.05-2),
libjdom1-java (= 1.1.2+dfsg-2),
+   libjsoup-java (= 1.6.2),
librome-java (= 1.0-3),
libws-commons-util-java,
libwsdl4j-java (= 1.6.2-4),

-- 
eclipse-mylyn - Plug-in for eclipse - Debian package.

___
pkg-java-commits mailing list
pkg-java-comm...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits


Bug#611130: CVE-2010-2087

2012-05-13 Thread Moritz Mühlenhoff
On Sun, May 13, 2012 at 05:52:05PM +0100, Steve McIntyre wrote:
 On Sun, Oct 02, 2011 at 05:53:48PM -0430, Miguel Landaeta wrote:
 #tag 611130 + idontgiveadamn
 tag 611130 + moreinfo
 kthxbye
 
 Upstream doesn't answer any request about this bug.
 
 I sent emails, I posted in their discussion forum and even joined their
 irc channel to ask a couple of question about this bug. I didn't receive
 any answer, I can say I was completely ignored.
 
 There is no info at Mitre website and AFAIK this issue is not fixed in
 any other free software distribution.
 
 I don't have time neither interest on this, good luck to anybody
 interested in fixing this bug. Be aware of uncooperative upstream.
 
 Given this, this package looks like a prime candidate for removal from
 the archive to be honest. Thoughts?

I concur, but libspring build-depends on it, something which needs to
be addressed somehow.

Cheers,
Moritz



__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#552032: ant workaround no longer functional

2012-05-13 Thread brian m. carlson
I've recently tried the workaround that I previously specified for this
bug and it no longer works.  In debug mode, I get the following error:

  Apache resolver library not found, internal resolver will be used
  Failed to load Apache resolver: java.lang.ClassNotFoundException: 
org.apache.tools.ant.types.resolver.ApacheCatalogResolver
  No matching catalog entry found, parser will use: 'profile-mode.xsl'

and I still see the message:

  Warning: XML resolver not found; external catalogs will be ignored

Not using the resolver makes things very, very slow and if I were
parsing XHTML before XHTML 5, it would not work at all, since it would
try (and fail with a 503 error) to load things off the W3C website.  I
suspect that the slowness is downloading the myriad stylesheets off of
DocBook's website.

Can someone look into why this is happening?  The bug has been open for
about two-and-a-half years now and it isn't getting any better.

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187


signature.asc
Description: Digital signature
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#611138: CVE-2010-4438 / CVE-2011-5035

2012-05-13 Thread Damien Raude-Morvan
Hi all,

Le dimanche 13 mai 2012 18:54:38, Steve McIntyre a écrit :
 Sadly, no :/ I must admit that Oracle does not publish details of its
 fixes so it's hard to confirm firmly what's component is exactly
 impacted.
 
 I'll try to revive my contact @Oracle to get some feedback on this
 issue (on future security issues).
 
 Hi,
 
 Any news on this?

I'll just start by restating my initial comment on both issues :
-
We don't build any real Glassfish Server but just some parts of API 
library used as Java EE specifications. As for any specification, this is just 
a 
collection of interfaces and don't have much more implementations than dumb or 
stub code.
-

So I don't think that CVE-2010-4438 or CVE-2011-5035 affect Debian binary 
packages. 

But I cannot be 100% sure since :
- Upstream bugtracker [1] doesn't contains ref to those security issues
- My Oracle contact (GlassFish community manager) only told me that 
CVE-2011-5035 is integrated in GlassFish 3.1.1 Patch 2 (an update to 3.1.1 
for paying customers). The fix is in the trunk and will be integrated in the 
3.1.2 release scheduled for later this quarter

I don't think I'll do further investigation on those issues...
At least, there is one instructing thing : we have to think twice before 
integrating of a full blown Glassfish JEE server (ie. not just API) into Debian 
as from my point of view Glassfish Security is not handled as an open source 
should.

[1] http://java.net/jira/browse/GLASSFISH

Cheers,
-- 
Damien - Debian Developper
http://wiki.debian.org/DamienRaudeMorvan


signature.asc
Description: This is a digitally signed message part.
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#670756: Tuxguitar does not start

2012-05-13 Thread Grant Diffey
so my installed package list is

nevyn@cetacea:~$ dpkg -l libswt*
Desired=Unknown/Install/Remove/Purge/Hold
|
Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ NameVersion
Description
+++-===-===-==
ii  libswt-cairo-gtk-3-jni  3.7.2-2
Standard Widget Toolkit for GTK+ Cairo JNI library
ii  libswt-glx-gtk-3-jni3.7.2-2
Standard Widget Toolkit for GTK+ GLX JNI library
ii  libswt-gnome-gtk-3-jni  3.7.2-2
Standard Widget Toolkit for GTK+ GNOME JNI library
un  libswt-gnome-gtk-3.5-jninone  (no
description available)
un  libswt-gnome-gtk-3.6-jninone  (no
description available)
ii  libswt-gtk-3-java   3.7.2-2
Standard Widget Toolkit for GTK+ Java library
un  libswt-gtk-3-java-gcj   none  (no
description available)
ii  libswt-gtk-3-jni3.7.2-2
Standard Widget Toolkit for GTK+ JNI library
un  libswt-gtk-3.4-java none  (no
description available)
un  libswt-gtk-3.4-jni  none  (no
description available)
ii  libswt-gtk-3.5-java 3.5.1-5
Standard Widget Toolkit for GTK+ Java library
un  libswt-gtk-3.5-java-gcj none  (no
description available)
ii  libswt-gtk-3.5-jni  3.5.1-5
Standard Widget Toolkit for GTK+ JNI library
ii  libswt-gtk-3.6-java 3.6.2-1
Standard Widget Toolkit for GTK+ Java library
un  libswt-gtk-3.6-java-gcj none  (no
description available)
ii  libswt-gtk-3.6-jni  3.6.2-1
Standard Widget Toolkit for GTK+ JNI library
ii  libswt-webkit-gtk-3-jni 3.7.2-2
Standard Widget Toolkit for GTK+ WebKit JNI library
un  libswt3.2-gtk-gcj   none  (no
description available)
un  libswt3.2-gtk-java  none  (no
description available)
un  libswt3.2-gtk-jni   none  (no
description available)



so yes

ii  libswt-gtk-3.5-jni  3.5.1-5
Standard Widget Toolkit for GTK+ JNI library

is installed.

if this breaks with the new version of

libswt-3-gtk-java should it not conflict?
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.