Hi Daniel,
I haven't been able to reproduce this error. Do you know what Java
packages were installed in the local repository? Did you build them on
sid or wheezy?
Emmanuel Bourg
__
This is the maintainer address of Debian's Java team
I prepared an update of the cglib package on alioth:
- The Built-Using field has been added
- debian/copyright now mentions the inclusion of the asm classes
- the asm license file is now included in cglib-nodep.jar like the jar
distributed by upstream
Tony, could you please upload this update if
gluegen2_2.1.4-1_amd64.changes uploaded successfully to ftp-master.debian.org
along with the files:
gluegen2_2.1.4-1.dsc
gluegen2_2.1.4.orig.tar.bz2
gluegen2_2.1.4-1.debian.tar.xz
libgluegen2-rt-java_2.1.4-1_all.deb
libgluegen2-build-java_2.1.4-1_all.deb
libgluegen2-doc_2.1.4-1_all.deb
gluegen2_2.1.4-1_amd64.changes uploaded successfully to localhost
along with the files:
gluegen2_2.1.4-1.dsc
gluegen2_2.1.4.orig.tar.bz2
gluegen2_2.1.4-1.debian.tar.xz
libgluegen2-rt-java_2.1.4-1_all.deb
libgluegen2-build-java_2.1.4-1_all.deb
libgluegen2-doc_2.1.4-1_all.deb
The cause of the problem is described here [0].
I tried it out and downgraded asm dependency to 3.3.2 in
d/maven.rules. After reverting
core/src/com/google/inject/internal/util/LineNumbers.java to previous
revision (it seems to be the only class depending on asm-4
functionality), I was able to
On 02/11/2014 06:39 AM, Eugene Zhukov wrote:
The cause of the problem is described here [0].
I tried it out and downgraded asm dependency to 3.3.2 in
d/maven.rules. After reverting
core/src/com/google/inject/internal/util/LineNumbers.java to previous
revision (it seems to be the only class
On Tue, Feb 11, 2014 at 4:56 PM, tony mancill tmanc...@debian.org wrote:
On 02/11/2014 06:39 AM, Eugene Zhukov wrote:
The cause of the problem is described here [0].
I tried it out and downgraded asm dependency to 3.3.2 in
d/maven.rules. After reverting
Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Tue, 11 Feb 2014 15:05:50 +0100
Source: gluegen2
Binary: libgluegen2-rt-java libgluegen2-build-java libgluegen2-jni
libgluegen2-doc
Architecture: source all amd64
Version: 2.1.4-1
Distribution: unstable
Urgency:
On Tue, Feb 11, 2014 at 08:10:28AM +0100, Emmanuel Bourg wrote:
Le 11/02/2014 05:16, tony mancill a écrit :
Instead of Built-Using or updating debian/copyright, it seems preferable
to refactor the source to use the actual libasm3-java JAR, although I
haven't yet looked into how much effort
Le 11/02/2014 21:22, Bastian Blank a écrit :
Have you talked to the security team about this? Where does Debian ship
different versions of asm?
Debian has four versions of asm. Each version is incompatible with the
previous one, and they share the same namespace (org.objectweb.asm.*).
That
Package: maven
Version: 3.0.5-1
Followup-For: Bug #738610
I'm experiencing the same problem since I've upgraded my system's
packages last Monday.
thanks
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign
Processing commands for cont...@bugs.debian.org:
reassign 738610 libsisu-guice-java
Bug #738610 [maven] maven: Can't run mvn due to some bad java library dependency
Bug reassigned from package 'maven' to 'libsisu-guice-java'.
No longer marked as found in versions maven/3.0.5-1.
Ignoring request
cglib_2.2.2+dfsg-6_amd64.changes uploaded successfully to localhost
along with the files:
cglib_2.2.2+dfsg-6.dsc
cglib_2.2.2+dfsg-6.debian.tar.xz
libcglib-java_2.2.2+dfsg-6_all.deb
libcglib-java-doc_2.2.2+dfsg-6_all.deb
Greetings,
Your Debian queue daemon (running on host
On 02/11/2014 04:29 AM, Emmanuel Bourg wrote:
I prepared an update of the cglib package on alioth:
- The Built-Using field has been added
- debian/copyright now mentions the inclusion of the asm classes
- the asm license file is now included in cglib-nodep.jar like the jar
distributed by
libsisu-guice-java_3.1.9+dfsg-2_all.deb: Built-Using refers to non-existing
source package libasm3-java (= 3.3.2-2)
===
Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.
__
This is the
On 2014-02-12 07:33, Debian FTP Masters wrote:
libsisu-guice-java_3.1.9+dfsg-2_all.deb: Built-Using refers to non-existing
source package libasm3-java (= 3.3.2-2)
[...]
You have to use source packages (i.e. asm3 instead of libasm3-java)
in Built-Using.
~Niels
__
This is the
sisu-guice_3.1.9+dfsg-3_amd64.changes uploaded successfully to localhost
along with the files:
sisu-guice_3.1.9+dfsg-3.dsc
sisu-guice_3.1.9+dfsg-3.debian.tar.xz
libsisu-guice-java_3.1.9+dfsg-3_all.deb
Greetings,
Your Debian queue daemon (running on host franck.debian.org)
__
This
On 02/11/2014 10:56 PM, Niels Thykier wrote:
On 2014-02-12 07:33, Debian FTP Masters wrote:
libsisu-guice-java_3.1.9+dfsg-2_all.deb: Built-Using refers to non-existing
source package libasm3-java (= 3.3.2-2)
[...]
You have to use source packages (i.e. asm3 instead of libasm3-java)
in
Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Format: 1.8
Date: Tue, 11 Feb 2014 22:40:19 -0800
Source: sisu-guice
Binary: libsisu-guice-java
Architecture: source all
Version: 3.1.9+dfsg-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
Le 12/02/2014 06:31, tony mancill a écrit :
The attribution looks appropriate to me. I changed the version number
to we're not uploading a new upstream source version just to switch to
XZ compression. That'll take effect with the next upstream upload (or
repack, if that ends up being
Your message dated Wed, 12 Feb 2014 07:03:38 +
with message-id e1wdtr8-te...@franck.debian.org
and subject line Bug#738610: fixed in sisu-guice 3.1.9+dfsg-3
has caused the Debian Bug report #738610,
regarding maven: Can't run mvn due to some bad java library dependency
to be marked as
Your message dated Wed, 12 Feb 2014 07:03:38 +
with message-id e1wdtr8-tx...@franck.debian.org
and subject line Bug#738580: fixed in sisu-guice 3.1.9+dfsg-3
has caused the Debian Bug report #738580,
regarding libsisu-guice-java - Incorporates other binaries without Built-Using
to be marked
On 02/11/2014 10:58 PM, Emmanuel Bourg wrote:
Le 12/02/2014 06:31, tony mancill a écrit :
The attribution looks appropriate to me. I changed the version number
to we're not uploading a new upstream source version just to switch to
XZ compression. That'll take effect with the next upstream
cglib_2.2.2+dfsg2-1_amd64.changes uploaded successfully to localhost
along with the files:
cglib_2.2.2+dfsg2-1.dsc
cglib_2.2.2+dfsg2.orig.tar.xz
cglib_2.2.2+dfsg2-1.debian.tar.xz
libcglib-java_2.2.2+dfsg2-1_all.deb
libcglib-java-doc_2.2.2+dfsg2-1_all.deb
Greetings,
Your Debian
Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Format: 1.8
Date: Tue, 11 Feb 2014 23:05:31 -0800
Source: cglib
Binary: libcglib-java libcglib-java-doc
Architecture: source all
Version: 2.2.2+dfsg2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
Your message dated Wed, 12 Feb 2014 07:33:21 +
with message-id e1wdujt-0004cr...@franck.debian.org
and subject line Bug#738583: fixed in cglib 2.2.2+dfsg2-1
has caused the Debian Bug report #738583,
regarding libcglib-java - Uses jarjar without proper copyright or Built-Using
to be marked as
26 matches
Mail list logo
