Your message dated Sun, 10 Jan 2021 21:49:20 +0000
with message-id <[email protected]>
and subject line Bug#979723: fixed in libspring-java 4.3.30-1
has caused the Debian Bug report #979723,
regarding Please drop the Build-Depends on jruby
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
979723: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979723
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:libspring-java
Version: 4.3.28-1
Severity: important
X-Debbugs-CC: [email protected]
Dear maintainers,
At the moment, jruby in Debian is pretty broken [1] and probably should
not be in the next Debian Stable release.
Since this package build-depends on it, jruby is in the "key packages"
list and is thus not subject to autoremoval from testing, although it
has multiple RC bugs.
AFAIU, the support for jruby in libspring-java is optional. Would it be
possible to remove it so that jruby can be taken off the "key packages"
list and be removed from testing?
Cheers,
[1]: https://lists.debian.org/debian-java/2020/12/msg00073.html
--
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Louis-Philippe Véronneau
⢿⡄⠘⠷⠚⠋ [email protected] / veronneau.org
⠈⠳⣄
OpenPGP_signature
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: libspring-java
Source-Version: 4.3.30-1
Done: Emmanuel Bourg <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libspring-java, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Emmanuel Bourg <[email protected]> (supplier of updated libspring-java package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 10 Jan 2021 22:30:25 +0100
Source: libspring-java
Architecture: source
Version: 4.3.30-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: Emmanuel Bourg <[email protected]>
Closes: 973381 979723
Changes:
libspring-java (4.3.30-1) unstable; urgency=medium
.
* Team upload.
* New upstream release
- Refreshed the patches
- Fixes CVE-2020-5421: RFD Protection Bypass via jsessionid
(Closes: #973381)
* No longer build the deprecated classes dedicated to JRuby scripting.
JRuby can still be used with the javax.script API (Closes: #979723)
* Standards-Version updated to 4.5.1
Checksums-Sha1:
974e493e89534d5a8c0a40b372ec60dede6b4215 5260 libspring-java_4.3.30-1.dsc
5f11ffe48d283174ca5ccb7683f40a94f3cd9f96 7208172
libspring-java_4.3.30.orig.tar.xz
c602a31deec607d5eaf072eeb5fedf6fd336ef02 21008
libspring-java_4.3.30-1.debian.tar.xz
09f98172fb6872de5f6b34e920948f8ab0d9dac0 13916
libspring-java_4.3.30-1_source.buildinfo
Checksums-Sha256:
695de59f936ac809be028d76d75d3f194d8a73d6415220c24a84d52558eb6c71 5260
libspring-java_4.3.30-1.dsc
80b31da14c048f74a0ce0753092228eac751e33fe05bec5f251cdb3a7aed91ca 7208172
libspring-java_4.3.30.orig.tar.xz
a37fcec130da198b73120f194a87098c14dec141653a4b1e2bb9feff764f2890 21008
libspring-java_4.3.30-1.debian.tar.xz
040f11ae6925e637a70fff3f3d8359fe5703e9bbca757abddfbd62b2071f2a58 13916
libspring-java_4.3.30-1_source.buildinfo
Files:
50a21730a81356cc64b012f2505a62c6 5260 java optional libspring-java_4.3.30-1.dsc
8bc2fa2f91a2a6f093ee23a43b4957ce 7208172 java optional
libspring-java_4.3.30.orig.tar.xz
3b85796322a6f454f64f976e0f96bb44 21008 java optional
libspring-java_4.3.30-1.debian.tar.xz
055e3d3ba288608feb4e4e9a8aa62680 13916 java optional
libspring-java_4.3.30-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=UIpD
-----END PGP SIGNATURE-----
--- End Message ---
