Package: libreoffice-canzeley-client Version: 0.5.1-1 Severity: important Tags: patch
Hello, we would like to remove libmysql-java from Debian because it is frequently affected by security vulnerabilities which are not fully disclosed. This makes it hard to determine the impact of such a flaw.[1] However we also have libmariadb-java which is a drop-in replacement and upstream is more transparent about security issues. Please find attached a patch that make the necessary changes to the Debian packaging. [1] https://bugs.debian.org/912916 Regards, Markus
>From e92546baa42ffa32db69d4ae2e35fa446b0e7622 Mon Sep 17 00:00:00 2001 From: Markus Koschany <a...@debian.org> Date: Fri, 9 Nov 2018 21:18:56 +0100 Subject: [PATCH] Switch from libmysql-java to libmariadb-java. --- debian/changelog | 7 +++++++ debian/control | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 5a583c9..a493a34 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +libreoffice-canzeley-client (0.5.1-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Switch from libmysql-java to libmariadb-java. + + -- Markus Koschany <a...@debian.org> Fri, 09 Nov 2018 21:19:16 +0100 + libreoffice-canzeley-client (0.5.1-1) unstable; urgency=medium * New upstream release diff --git a/debian/control b/debian/control index 764b1a9..2e16ba9 100644 --- a/debian/control +++ b/debian/control @@ -10,7 +10,7 @@ Vcs-Browser: https://anonscm.debian.org/cgit/collab-maint/libreoffice-canzeley-c Package: libreoffice-canzeley-client Architecture: all -Depends: libmysql-java | libreoffice-mysql-connector, +Depends: libmariadb-java | libreoffice-mysql-connector, libreoffice-base, libreoffice-common, libreoffice-writer, -- 2.19.1
