netbeans 8.1+dfsg3-2 MIGRATED to testing

[Debian testing watch]

FYI: The status of the netbeans source package
in Debian's testing distribution has changed.

  Previous version: 8.1+dfsg3-1
  Current version:  8.1+dfsg3-2

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

reproducible.debian.net status changes for snappy-java

[Reproducible builds folks]

2017-04-24 01:06 
https://tests.reproducible-builds.org/debian/unstable/amd64/snappy-java changed 
from reproducible -> unreproducible
2017-04-24 02:28 
https://tests.reproducible-builds.org/debian/unstable/amd64/snappy-java changed 
from unreproducible -> reproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

reproducible.debian.net status changes for sqlline

[Reproducible builds folks]

2017-04-24 01:10 
https://tests.reproducible-builds.org/debian/unstable/amd64/sqlline changed 
from reproducible -> unreproducible
2017-04-24 02:27 
https://tests.reproducible-builds.org/debian/unstable/amd64/sqlline changed 
from unreproducible -> reproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

reproducible.debian.net status changes for robust-http-client

[Reproducible builds folks]

2017-04-24 01:05 
https://tests.reproducible-builds.org/debian/unstable/amd64/robust-http-client 
changed from reproducible -> unreproducible
2017-04-24 02:24 
https://tests.reproducible-builds.org/debian/unstable/amd64/robust-http-client 
changed from unreproducible -> reproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

quoin-clojure_0.1.2-1_amd64.changes is NEW

[Debian FTP Masters]

binary:libquoin-clojure is NEW.
binary:libquoin-clojure is NEW.
source:quoin-clojure is NEW.

Your package has been put into the NEW queue, which requires manual action
from the ftpteam to process. The upload was otherwise valid (it had a good
OpenPGP signature and file hashes are valid), so please be patient.

Packages are routinely processed through to the archive, and do feel
free to browse the NEW queue[1].

If there is an issue with the upload, you will receive an email from a
member of the ftpteam.

If you have any questions, you may reply to this email.

[1]: https://ftp-master.debian.org/new.html
 or https://ftp-master.debian.org/backports-new.html for *-backports

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of quoin-clojure_0.1.2-1_amd64.changes

[Debian FTP Masters]

quoin-clojure_0.1.2-1_amd64.changes uploaded successfully to localhost
along with the files:
  quoin-clojure_0.1.2-1.dsc
  quoin-clojure_0.1.2.orig.tar.gz
  quoin-clojure_0.1.2-1.debian.tar.xz
  libquoin-clojure_0.1.2-1_all.deb
  quoin-clojure_0.1.2-1_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

logback_1.1.2-1+deb8u1_amd64.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Mapping jessie to stable.
Mapping stable to proposed-updates.

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Mon, 24 Apr 2017 13:41:45 +0200
Source: logback
Binary: liblogback-java liblogback-java-doc
Architecture: source all
Version: 1:1.1.2-1+deb8u1
Distribution: jessie
Urgency: high
Maintainer: Debian Java Maintainers 

Changed-By: Markus Koschany 
Description:
 liblogback-java - flexible logging library for Java
 liblogback-java-doc - flexible logging library for Java - documentation
Closes: 857343
Changes:
 logback (1:1.1.2-1+deb8u1) jessie; urgency=high
 .
   * Team upload.
   * Fix CVE-2017-5929:
 It was discovered that logback, a flexible logging library for Java, would
 deserialize data from untrusted sockets. This issue has been resolved by
 adding a whitelist to use only trusted classes. (Closes: #857343)
Checksums-Sha1:
 279a0764fb1ff52d1aaba3925722adccee03236b 2270 logback_1.1.2-1+deb8u1.dsc
 951e6cd1c497d14fb10ebf518937928232cdc830 11560 
logback_1.1.2-1+deb8u1.debian.tar.xz
 daed26934cf922a190b4c317841b69cf985a2d14 624718 
liblogback-java_1.1.2-1+deb8u1_all.deb
 025cebc4db3445261cb9f87a5a62f832e9cdf138 1778332 
liblogback-java-doc_1.1.2-1+deb8u1_all.deb
Checksums-Sha256:
 103395aa6dbb290dd74454254fd83e04f2c02c4612d2f83c98da692b64ee240e 2270 
logback_1.1.2-1+deb8u1.dsc
 502d128e960a611893292515072edeb33bec82811c526251d29655a499a15e77 11560 
logback_1.1.2-1+deb8u1.debian.tar.xz
 fa847a1bf2f3e3e28e9196376ea21494164a8cc2c1b350cbc47aab740a2c89b6 624718 
liblogback-java_1.1.2-1+deb8u1_all.deb
 6c7b00e07633a53dd6cb5775c0968347583388b81b1014398ea8b140ba76cb3a 1778332 
liblogback-java-doc_1.1.2-1+deb8u1_all.deb
Files:
 b507b7bdd6ac787dd21281e1abd4a6e2 2270 java optional logback_1.1.2-1+deb8u1.dsc
 0c376c4b6f715d0351c1f3168ac1792c 11560 java optional 
logback_1.1.2-1+deb8u1.debian.tar.xz
 91fae7f0d03b6fe14e15164c97d9537f 624718 java optional 
liblogback-java_1.1.2-1+deb8u1_all.deb
 7c5b86df31d22cd6abdf47c71de76f75 1778332 doc optional 
liblogback-java-doc_1.1.2-1+deb8u1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=Eb+2
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of logback_1.1.2-1+deb8u1_amd64.changes

[Debian FTP Masters]

logback_1.1.2-1+deb8u1_amd64.changes uploaded successfully to localhost
along with the files:
  logback_1.1.2-1+deb8u1.dsc
  logback_1.1.2-1+deb8u1.debian.tar.xz
  liblogback-java_1.1.2-1+deb8u1_all.deb
  liblogback-java-doc_1.1.2-1+deb8u1_all.deb

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#861063: marked as done (libxmlenc-java-doc: unhandled symlink to directory conversion: /usr/share/doc/PACKAGE)

[Debian Bug Tracking System]

Your message dated Mon, 24 Apr 2017 09:33:52 +
with message-id 
and subject line Bug#861063: fixed in libxmlenc-java 0.52+dfsg-5
has caused the Debian Bug report #861063,
regarding libxmlenc-java-doc: unhandled symlink to directory conversion: 
/usr/share/doc/PACKAGE
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
861063: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861063
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libxmlenc-java-doc
Version: 0.52+dfsg-4
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts

Hi,

an upgrade test with piuparts revealed that your package installs files
over existing symlinks and possibly overwrites files owned by other
packages. This usually means an old version of the package shipped a
symlink but that was later replaced by a real (and non-empty)
directory. This kind of overwriting another package's files cannot be
detected by dpkg.

This was observed on the following upgrade paths:

  squeeze -> wheezy -> jessie -> stretch

(there was no libxmlenc-java-doc in wheezy and jessie, so the
squeeze version was kept installed)

For /usr/share/doc/PACKAGE this may not be problematic as long as both
packages are installed, ship byte-for-byte identical files and are
upgraded in lockstep. But once one of the involved packages gets
removed, the other one will lose its documentation files, too,
including the copyright file, which is a violation of Policy 12.5:
https://www.debian.org/doc/debian-policy/ch-docs.html#s-copyrightfile

For other overwritten locations anything interesting may happen.

Note that dpkg intentionally does not replace directories with symlinks
and vice versa, you need the maintainer scripts to do this.
See in particular the end of point 4 in
https://www.debian.org/doc/debian-policy/ch-maintainerscripts.html#s-unpackphase

It is recommended to use the dpkg-maintscript-helper commands
'dir_to_symlink' and 'symlink_to_dir' (available since dpkg 1.17.14)
to perform the conversion, ideally using d/$PACKAGE.maintscript.
Do not forget to add 'Pre-Depends: ${misc:Pre-Depends}' in d/control.
See dpkg-maintscript-helper(1) and dh_installdeb(1) for details.


>From the attached log (usually somewhere in the middle...):

1m26.1s ERROR: FAIL: silently overwrites files via directory symlinks:
  /usr/share/doc/libxmlenc-java-doc/changelog.Debian.gz (libxmlenc-java-doc) != 
/usr/share/doc/libxmlenc-java/changelog.Debian.gz (libxmlenc-java)
/usr/share/doc/libxmlenc-java-doc -> libxmlenc-java
  /usr/share/doc/libxmlenc-java-doc/changelog.gz (libxmlenc-java-doc) != 
/usr/share/doc/libxmlenc-java/changelog.gz (libxmlenc-java)
/usr/share/doc/libxmlenc-java-doc -> libxmlenc-java
  /usr/share/doc/libxmlenc-java-doc/copyright (libxmlenc-java-doc) != 
/usr/share/doc/libxmlenc-java/copyright (libxmlenc-java)
/usr/share/doc/libxmlenc-java-doc -> libxmlenc-java


cheers,

Andreas


libxmlenc-java-doc_0.52+dfsg-4.log.gz
Description: application/gzip
--- End Message ---
--- Begin Message ---
Source: libxmlenc-java
Source-Version: 0.52+dfsg-5

We believe that the bug you reported is fixed in the latest version of
libxmlenc-java, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 861...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emmanuel Bourg  (supplier of updated libxmlenc-java package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 24 Apr 2017 11:13:08 +0200
Source: libxmlenc-java
Binary: libxmlenc-java
Architecture: source
Version: 0.52+dfsg-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libxmlenc-java - Fast stream-based XML output library for java
Closes: 861063
Changes:
 libxmlenc-java (0.52+dfsg-5) unstable; urgency=medium
 .
   * Team upload.
   * Removed the libxmlenc-java-doc package (Closes: #861063)
   * Simplified debian/rules
   * Use a secure Vcs-Git URL
Checksums-Sha1:
 92681f374689baa6b743e5838561f60fa8ab8757 2066 libxmlenc-java_0.52+dfsg-5.dsc
 2133cf9b75d48b7ac0f0ec3a813e616050ae912e 3208 
libxmlenc-java_0.52+dfsg-5.debian.tar.xz
 e1b742de0b

libxmlenc-java_0.52+dfsg-5_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 24 Apr 2017 11:13:08 +0200
Source: libxmlenc-java
Binary: libxmlenc-java
Architecture: source
Version: 0.52+dfsg-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 

Changed-By: Emmanuel Bourg 
Description:
 libxmlenc-java - Fast stream-based XML output library for java
Closes: 861063
Changes:
 libxmlenc-java (0.52+dfsg-5) unstable; urgency=medium
 .
   * Team upload.
   * Removed the libxmlenc-java-doc package (Closes: #861063)
   * Simplified debian/rules
   * Use a secure Vcs-Git URL
Checksums-Sha1:
 92681f374689baa6b743e5838561f60fa8ab8757 2066 libxmlenc-java_0.52+dfsg-5.dsc
 2133cf9b75d48b7ac0f0ec3a813e616050ae912e 3208 
libxmlenc-java_0.52+dfsg-5.debian.tar.xz
 e1b742de0b11646334720527e9783a46848a3896 10378 
libxmlenc-java_0.52+dfsg-5_source.buildinfo
Checksums-Sha256:
 020142a6a00fb09dac3086f68f9ce5c7df45b34a71c405a195f6dd1ae6aa0a53 2066 
libxmlenc-java_0.52+dfsg-5.dsc
 f86ac53831157259ed62f086eff7ef1deaf3e1edbd3a9904a93de31a3eced0ff 3208 
libxmlenc-java_0.52+dfsg-5.debian.tar.xz
 637f7e7d3f04213bb393685660ce0dbfeb1454e4af75582cd74225d6616cab4a 10378 
libxmlenc-java_0.52+dfsg-5_source.buildinfo
Files:
 48558c2a787a86d310fb20ed8ce6a6c2 2066 java optional 
libxmlenc-java_0.52+dfsg-5.dsc
 941ebd288028aac36b62d0c5c3e1e58a 3208 java optional 
libxmlenc-java_0.52+dfsg-5.debian.tar.xz
 2f3b0b0e8005645f426da73cf7f8e586 10378 java optional 
libxmlenc-java_0.52+dfsg-5_source.buildinfo

-BEGIN PGP SIGNATURE-

iQJGBAEBCAAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAlj9wlkSHGVib3VyZ0Bh
cGFjaGUub3JnAAoJEPUTxBnkudCs+mgP/1VWLI5LTwydakYF7g/ZYLp0sWokqIWA
II5QyEyun7/bdfw0uK/LVtBWtMjE38DyjQ8x35gQLVhYGVQuWg9m0WzYF16Fdd7/
rfcV1QjAboxibrjQ+ma46a6ftEYf7OJmalQTDosbsE7OAF8w1trfTPP7u8aZLQRZ
Qs5dNJ5PSndOP3qbeYYAXoqptefd4F7hs8UDEUXVoLNh6DtvOnWRgfzzSFanDxMK
XbTWDDO1aS8Rh1SXdWcNuKLVB8BnfsS4qYH2Dof5+KPhK4NYOYJHQ4x6wbgtIrg3
qi96yFoPoDmlz1NPgtjdWZ5gzmvD9J3OLDC7z6WAD8IqUskwQ52VrEHOJ1B9Gkj7
HMEvd5HfWweyDALho1XVAjhDlFr5oK4PNHEIb0gJKIaELTNvp1w+qBxV3A2PHZ3D
XSv+jT3BnFPln5zJPYgu8RAuhavEP7gBu4aUIvkFC7/S8Wuj0IvXauAKbXp+V77A
CjJ5s2AClWn5ARzAcmhNrsQe5b1TlRv+I0hlcgkuzbpfHz4DK5UmplvVTkidG121
U7dlnXTyz49PSUHsvwk6wrDWH28upfx6lCmA3UGDJwpRL+JzFbr+Y42YDeupF+OV
F7CZymv4Dht75SVZQC3qsuzPvOUpfsGjB5QXedYM1KHlpoAcMhhnR5i+BCWS1Fnf
irxGrrqDaIsI
=9v4B
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processing of libxmlenc-java_0.52+dfsg-5_source.changes

[Debian FTP Masters]

libxmlenc-java_0.52+dfsg-5_source.changes uploaded successfully to localhost
along with the files:
  libxmlenc-java_0.52+dfsg-5.dsc
  libxmlenc-java_0.52+dfsg-5.debian.tar.xz
  libxmlenc-java_0.52+dfsg-5_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Processed: Pending fixes for bugs in the libxmlenc-java package

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> tag 861063 + pending
Bug #861063 [libxmlenc-java-doc] libxmlenc-java-doc: unhandled symlink to 
directory conversion: /usr/share/doc/PACKAGE
Added tag(s) pending.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
861063: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861063
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#861063: Pending fixes for bugs in the libxmlenc-java package

[pkg-java-maintainers]

tag 861063 + pending
thanks

Some bugs in the libxmlenc-java package are closed in revision
3d1f49921d12de78db07bca47dc0ebcd63ed0a0c in branch 'master' by
Emmanuel Bourg

The full diff can be seen at
https://anonscm.debian.org/cgit/pkg-java/libxmlenc-java.git/commit/?id=3d1f499

Commit message:

Removed the libxmlenc-java-doc package (Closes: #861063)

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Bug#861063: libxmlenc-java-doc: unhandled symlink to directory conversion: /usr/share/doc/PACKAGE

[Andreas Beckmann]

Package: libxmlenc-java-doc
Version: 0.52+dfsg-4
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts

Hi,

an upgrade test with piuparts revealed that your package installs files
over existing symlinks and possibly overwrites files owned by other
packages. This usually means an old version of the package shipped a
symlink but that was later replaced by a real (and non-empty)
directory. This kind of overwriting another package's files cannot be
detected by dpkg.

This was observed on the following upgrade paths:

  squeeze -> wheezy -> jessie -> stretch

(there was no libxmlenc-java-doc in wheezy and jessie, so the
squeeze version was kept installed)

For /usr/share/doc/PACKAGE this may not be problematic as long as both
packages are installed, ship byte-for-byte identical files and are
upgraded in lockstep. But once one of the involved packages gets
removed, the other one will lose its documentation files, too,
including the copyright file, which is a violation of Policy 12.5:
https://www.debian.org/doc/debian-policy/ch-docs.html#s-copyrightfile

For other overwritten locations anything interesting may happen.

Note that dpkg intentionally does not replace directories with symlinks
and vice versa, you need the maintainer scripts to do this.
See in particular the end of point 4 in
https://www.debian.org/doc/debian-policy/ch-maintainerscripts.html#s-unpackphase

It is recommended to use the dpkg-maintscript-helper commands
'dir_to_symlink' and 'symlink_to_dir' (available since dpkg 1.17.14)
to perform the conversion, ideally using d/$PACKAGE.maintscript.
Do not forget to add 'Pre-Depends: ${misc:Pre-Depends}' in d/control.
See dpkg-maintscript-helper(1) and dh_installdeb(1) for details.


>From the attached log (usually somewhere in the middle...):

1m26.1s ERROR: FAIL: silently overwrites files via directory symlinks:
  /usr/share/doc/libxmlenc-java-doc/changelog.Debian.gz (libxmlenc-java-doc) != 
/usr/share/doc/libxmlenc-java/changelog.Debian.gz (libxmlenc-java)
/usr/share/doc/libxmlenc-java-doc -> libxmlenc-java
  /usr/share/doc/libxmlenc-java-doc/changelog.gz (libxmlenc-java-doc) != 
/usr/share/doc/libxmlenc-java/changelog.gz (libxmlenc-java)
/usr/share/doc/libxmlenc-java-doc -> libxmlenc-java
  /usr/share/doc/libxmlenc-java-doc/copyright (libxmlenc-java-doc) != 
/usr/share/doc/libxmlenc-java/copyright (libxmlenc-java)
/usr/share/doc/libxmlenc-java-doc -> libxmlenc-java


cheers,

Andreas


libxmlenc-java-doc_0.52+dfsg-4.log.gz
Description: application/gzip
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.