Bug#684015: jsymphonic: Transition package to use default java implementation

2012-08-06 Thread James Page
Package: jsymphonic
Version: 0.3.0.Ode.To.Freedom+svn387-7
Severity: normal
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu quantal ubuntu-patch openjdk-7-transition

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * Transition package to use default java implementation:
- d/control: Switch dependencies from openjdk-6-* to default-*.
- d/rules: Set JAVA_HOME to /usr/lib/jvm/default-java.
- d/build.xml: Set source/target = 1.5 to ensure backwards compatible
  bytecode is built.

Ubuntu is transitioning from openjdk-6 to openjdk-7 as default java; this patch
eases the transition and ensures that the code built by the package is backwards
compatible with java 1.5+.  Note that this transition is not a wheezy release
goal.

Thanks for considering the patch.


- -- System Information:
Debian Release: wheezy/sid
  APT prefers quantal-updates
  APT policy: (500, 'quantal-updates'), (500, 'quantal-security'), (500, 
'quantal')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.5.0-8-generic (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAEBCAAGBQJQH5boAAoJEL/srsug59jD6OkQAMUzaSnW/hMDQzKC4k6+IiRa
jw9fbYge+EAUf/wtI2BjlWJr55zG2J64QjBQ5iHtiiwR+hfiAoy+VfGIw+dcRhPw
zhRP6PRFXLKdJe5x3hBOZOXXd8Fk6OA5zLXA1GtMKgrLVb6mHO8DSjG+7nGKbbEH
POgBFnttz3mDKJBOWJ95C8TT/rFTCbTbFLDCaGkhP7zCnnTtDVUTs8rAywPRJw6H
4hCt2SMp+cqlEn96ur/leCTs+jLDluI1HlOPa8z128SH4B7mjUnguLMbfjYGZ2wU
Di6tvWBda82RV5+pP1fvja7bAZzTv+SaqtQ+/4NzEkR3ZQD4Rrm2z2E1tALyxVm5
CR+CzzV7j3J8WnZesP9b5f/p+6saWnEWz0dSiBIDx4YT8mOB4dUXehBeNaOJTLJ+
/fw9mW6okRlkADTojtBm9dTHuiy2eMdB2h1xpCH+Og0V2MMFuPA6tIwC2X6/wxT4
HHF4btz4S42v/WIyRhI3dtu8NbCR8uNmcR92onXAzox2WVOy4Yq8f2BNf2bp2qAO
UmUuGeWdUzKnM/fF6za8CasUSCTmKamYFBFPilOpbjGmcJVI+/2+3Dr+hG+k+NJT
04Yk90H0HrhxvOoz/gK/MD2uQWCrpZ1QhoYMdn44YEz8FRQzWw3y94Iil8MT08vT
Lx8fTHiKTPzNGvvSen3d
=Mqns
-END PGP SIGNATURE-
diff -Nru jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/build.xml jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/build.xml
--- jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/build.xml	2011-04-04 21:00:51.0 +0100
+++ jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/build.xml	2012-08-06 10:48:05.0 +0100
@@ -33,7 +33,8 @@
   /target
   
   target name=compile depends=init
-javac srcdir=${srcdir} destdir=${builddir} encoding=UTF-8 /
+javac srcdir=${srcdir} destdir=${builddir} encoding=UTF-8
+   source=1.5 target=1.5 /
   /target
 
   target name=build depends=compile,languages,resources
diff -Nru jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/changelog jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/changelog
diff -Nru jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/control jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/control
--- jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/control	2011-06-04 19:31:56.0 +0100
+++ jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/control	2012-08-06 11:02:06.0 +0100
@@ -4,7 +4,7 @@
 Maintainer: Debian Java Maintainers pkg-java-maintainers@lists.alioth.debian.org
 Uploaders: Vincent Fourmond fourm...@debian.org
 Build-Depends: cdbs, debhelper (= 7), ant, javahelper (= 0.36)
-Build-Depends-Indep: openjdk-6-jdk, libswing-layout-java
+Build-Depends-Indep: default-jdk, libswing-layout-java
 Standards-Version: 3.9.2
 Homepage: http://sourceforge.net/projects/symphonic/
 Vcs-Svn: svn://svn.debian.org/svn/pkg-java/trunk/jsymphonic
@@ -13,7 +13,7 @@
 
 Package: jsymphonic
 Architecture: all
-Depends: openjdk-6-jre | java6-runtime, java-wrappers (= 0.1.22),
+Depends: default-jre | java6-runtime, java-wrappers (= 0.1.22),
  	 ${misc:Depends}, ${java:Depends}
 Recommends: ffmpeg
 Suggests: pmount
@@ -24,4 +24,4 @@
  .
  This program provides functionalities similar to the proprietary
  Windows-only SonicStage software given by Sony to interact with
- the players.
\ No newline at end of file
+ the players.
diff -Nru jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/rules jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/rules
--- jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/rules	2011-09-29 20:15:04.0 +0100
+++ jsymphonic-0.3.0.Ode.To.Freedom+svn387/debian/rules	2012-08-06 10:47:40.0 +0100
@@ -12,7 +12,7 @@
 include /usr/share/cdbs/1/class/javahelper.mk
 include /usr/share/cdbs/1/class/ant.mk
 
-JAVA_HOME_DIRS   := /usr/lib/jvm/java-6-openjdk-$(shell dpkg-architecture -qDEB_HOST_ARCH)
+JAVA_HOME_DIRS   := /usr/lib/jvm/default-java
 ANT_HOME := /usr/share/ant
 DEB_ANT_COMPILER := modern
 DEB_BUILDDIR := .
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#684022: leiningen: Transition package to use default java implementation.

2012-08-06 Thread James Page
Package: leiningen
Version: 1.7.1-1
Severity: normal
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu quantal ubuntu-patch openjdk-7-transition

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * Transition package to use default java implementation:
- d/control: BD on default-jdk, switch runtime dependency to
  default-jre | java6-runtime.


Ubuntu is transitioning from openjdk-6 to openjdk-7 as default java; this patch
eases the transition (and future transitions). Note that this transition is not
a wheezy release goal.

Thanks for considering the patch.


- -- System Information:
Debian Release: wheezy/sid
  APT prefers quantal-updates
  APT policy: (500, 'quantal-updates'), (500, 'quantal-security'), (500, 
'quantal')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.5.0-8-generic (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
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=zfz1
-END PGP SIGNATURE-
diff -Nru leiningen-1.7.1/debian/changelog leiningen-1.7.1/debian/changelog
diff -Nru leiningen-1.7.1/debian/control leiningen-1.7.1/debian/control
--- leiningen-1.7.1/debian/control	2012-03-28 16:14:11.0 +0100
+++ leiningen-1.7.1/debian/control	2012-08-06 11:24:29.0 +0100
@@ -24,7 +24,7 @@
  librobert-hooke-clojure,
  libtext-markdown-perl | markdown,
  libwagon-java,
- openjdk-6-jdk,
+ default-jdk,
  rlwrap,
  zip
 Standards-Version: 3.9.3
@@ -38,7 +38,7 @@
 Depends:
  ${java:Depends},
  ${misc:Depends},
- openjdk-6-jre | openjdk-7-jre,
+ default-jre | java6-runtime,
  clojure-contrib (= 1.2.0),
  rlwrap
 Recommends:
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#683930: eclipse: 3.8.0~rc4-1 exits with log error: Unable to acquire application

2012-08-06 Thread Jakub Adam

Hi,

On 6.8.2012 04:41, JS wrote:

I ran the eclipse 3.8.0 gotten straight from eclipse.org, without any change to 
my existing configuration or
selection of java alternatives (of Oracle jre) and it ran perfectly fine. 
Further, I did not run eclipse as root.


Tarball from Eclipse.org is quite different in some aspects, it can write to 
any file in its installation
and because it carries all required libraries inside, it will work almost 
anywhere independent on the system.
It won't help much in investigating of this issue.

But you said Eclipse won't start even without your ~/.eclipse, so the problem 
is not there but somewhere else.

One test that can say us something more is running Eclipse with enabled OSGi 
console. Execute from the shell:

  eclipse -console -consoleLog -noExit

After a while you should be presented with the console, it should keep running 
even after Eclipse terminates
with error. Type 'ss' in the shell. Then you will see a list of loaded plugins 
like this:

id  State   Bundle
0   ACTIVE  org.eclipse.osgi_3.8.0.dist
1   ACTIVE  org.eclipse.equinox.simpleconfigurator_1.0.300.dist
2   ACTIVE  com.ibm.icu_4.4.2.v20110823
3   RESOLVEDcom.jcraft.jsch_0.1.42
4   RESOLVEDjavax.el_2.2.0
5   RESOLVEDjavax.servlet_3.0.0.v201103241327
6   RESOLVEDjavax.servlet.jsp_2.2.0.v201103241327
7   RESOLVEDorg.apache.ant_1.8.3.v20120321-1730
8   RESOLVEDorg.apache.commons.codec_1.4.0
9   RESOLVEDorg.apache.commons.httpclient_3.1.0
10  RESOLVEDorg.apache.commons.logging_1.0.4.v20080605-1930
...

Look if there are any bundles in INSTALLED State. Those are the ones that had 
some problem in initialization.
Run 'diag bundle numeric id' to see more information on that plugin, like any 
unresolved dependencies.

You can read some more information about OSGi console in this article [1].


If the same upstream source works fine on my system but the debian package does 
not, isn't this more
likely to be a packaging issue?


Maybe, I can't say for sure right now, as I don't have enough information yet. 
Post here an output from your
OSGi console session, perhaps try to answer some questions from my previous 
mail. Can you run distribution
Eclipse with OpenJDK? Is a different user (with clean $HOME) able to run it?


A similar issue arose with 3.7.2 in the earlier bug referenced in my email.


This was a problem with Oracle Java and its hardcoded search path for JNI 
libraries that doesn't include
/usr/lib/jni, where JNI libraries are placed according to Debian guidelines. 
Eventually we decided to put a
workaround patch into SWT package because many people are still using Oracle 
Java [2].

Nevertheless, with SWT 3.8.0 this should be fixed and there is no mention of 
~/.swt/lib/linux/x86 in your error
logs, so your problem seems to have a different cause.

Regards,

Jakub

[1] http://www.eclipsezone.com/eclipse/forums/t99010.html
[2] 
http://anonscm.debian.org/gitweb/?p=pkg-java/swt-gtk.git;a=commit;h=c4fe7237fef825b2643993a7cf5e4b8cc1dc0285

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#683993: sweethome3d crashes with java-6-openjdk-amd64, works with java-6-sun

2012-08-06 Thread Gabriele Giacone
On 08/06/2012 08:15 AM, Richard Scherping wrote:
 # Problematic frame:
 # C  [libGL.so.1+0x1ed13]  glXGetFBConfigs+0x53
 #
 # An error report file with more information is saved as:
 # /tmp/hs_err_pid2717.log

1/ Please attach hs_err_pid.log file produced and glxinfo output.

2/ Try openjdk-7.

$ sudo apt-get install openjdk-7-jre
$ sudo update-java-alternatives --jre -s java-1.7.0-openjdk-amd64

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Bug#683930: eclipse: 3.8.0~rc4-1 exits with log error: Unable to acquire application

2012-08-06 Thread JS
Jakub,
Thanks for the info. It will take me some time to setup the test with the OSGi 
console
as I'll have to rollback my system when it's done, won't get to that before 
this weekend.
However what I cannot do is run without the latest Oracle java: that's the only 
one thatreally works properly with some important apps I need, like Citrix.  
The tarball fromeclipse, as well as the packaged 3.7.2-1, work fine with it.
thanks,--jack
--- On Mon, 8/6/12, Jakub Adam jakub.a...@ktknet.cz wrote:

From: Jakub Adam jakub.a...@ktknet.cz
Subject: Re: eclipse: 3.8.0~rc4-1 exits with log error: Unable to acquire 
application
To: JS jsh...@yahoo.com
Cc: 683...@bugs.debian.org 683...@bugs.debian.org
Date: Monday, August 6, 2012, 7:14 AM

Hi,

On 6.8.2012 04:41, JS wrote:
 I ran the eclipse 3.8.0 gotten straight from eclipse.org, without any change 
 to my existing configuration or
 selection of java alternatives (of Oracle jre) and it ran perfectly fine. 
 Further, I did not run eclipse as root.

Tarball from Eclipse.org is quite different in some aspects, it can write to 
any file in its installation
and because it carries all required libraries inside, it will work almost 
anywhere independent on the system.
It won't help much in investigating of this issue.

But you said Eclipse won't start even without your ~/.eclipse, so the problem 
is not there but somewhere else.

One test that can say us something more is running Eclipse with enabled OSGi 
console. Execute from the shell:

  eclipse -console -consoleLog -noExit

After a while you should be presented with the console, it should keep running 
even after Eclipse terminates
with error. Type 'ss' in the shell. Then you will see a list of loaded plugins 
like this:

id      State       Bundle
0       ACTIVE      org.eclipse.osgi_3.8.0.dist
1       ACTIVE      org.eclipse.equinox.simpleconfigurator_1.0.300.dist
2       ACTIVE      com.ibm.icu_4.4.2.v20110823
3       RESOLVED    com.jcraft.jsch_0.1.42
4       RESOLVED    javax.el_2.2.0
5       RESOLVED    javax.servlet_3.0.0.v201103241327
6       RESOLVED    javax.servlet.jsp_2.2.0.v201103241327
7       RESOLVED    org.apache.ant_1.8.3.v20120321-1730
8       RESOLVED    org.apache.commons.codec_1.4.0
9       RESOLVED    org.apache.commons.httpclient_3.1.0
10      RESOLVED    org.apache.commons.logging_1.0.4.v20080605-1930
...

Look if there are any bundles in INSTALLED State. Those are the ones that had 
some problem in initialization.
Run 'diag bundle numeric id' to see more information on that plugin, like any 
unresolved dependencies.

You can read some more information about OSGi console in this article [1].

 If the same upstream source works fine on my system but the debian package 
 does not, isn't this more
 likely to be a packaging issue?

Maybe, I can't say for sure right now, as I don't have enough information yet. 
Post here an output from your
OSGi console session, perhaps try to answer some questions from my previous 
mail. Can you run distribution
Eclipse with OpenJDK? Is a different user (with clean $HOME) able to run it?

 A similar issue arose with 3.7.2 in the earlier bug referenced in my email.

This was a problem with Oracle Java and its hardcoded search path for JNI 
libraries that doesn't include
/usr/lib/jni, where JNI libraries are placed according to Debian guidelines. 
Eventually we decided to put a
workaround patch into SWT package because many people are still using Oracle 
Java [2].

Nevertheless, with SWT 3.8.0 this should be fixed and there is no mention of 
~/.swt/lib/linux/x86 in your error
logs, so your problem seems to have a different cause.

Regards,

Jakub

[1] http://www.eclipsezone.com/eclipse/forums/t99010.html
[2] 
http://anonscm.debian.org/gitweb/?p=pkg-java/swt-gtk.git;a=commit;h=c4fe7237fef825b2643993a7cf5e4b8cc1dc0285
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Re: Bug#608286: CVE-2010-4312: does not use HTTPOnly for session cookies by default

2012-08-06 Thread tony mancill
On 07/27/2012 04:08 AM, Thijs Kinkhorst wrote:
 Hi,
 
 However, this is not a vulnerability, only extra hardening which is
 surely
 useful but not a vulnerability in itself. I'm therefore downgrading this
 bug to minor: the request to update the README.Debian.
 
 Thank you for looking into this bug.  I shouldn't have let this one go
 for so long, but honestly, I'm not sure about the text to add to the
 package readme.
 
 Can you propose appropriate wording to add to README.Debian.  Would it
 be sufficient to reference the CVE and include a link (say, to [1])?
 
 See attached patch for a change to README.Debian. I've tested it and
 confirmed that it has the desired effect.
 
 Please apply it to the repository; I'm not sure that a separate upload to
 wheezy is warranted for this but if you're going to make an upload before
 the release please be sure to include this aswell.
 
 
 Cheers,
 Thijs

Applied - thank you!

tony

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.


Processed: tagging 608286

2012-08-06 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

 tags 608286 + pending
Bug #608286 [tomcat6] CVE-2010-4312: does not use HTTPOnly for session cookies 
by default
Added tag(s) pending.
 thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
608286: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608286
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers. 
Please use
debian-j...@lists.debian.org for discussions and questions.