Your message dated Wed, 09 Dec 2015 10:09:09 +0000 with message-id <e1a6bgl-0001mt...@franck.debian.org> and subject line Bug#806920: fixed in voms-api-java 3.0.5-3 has caused the Debian Bug report #806920, regarding voms-api-java: FTBFS with bouncycastle 1.51 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 806920: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806920 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: voms-api-java Version: 3.0.5-2 Severity: important Dear maintainer, voms-api-java fails to build from source with the current version of bouncycastle in experimental. We intend to upload this version to unstable this weekend due to a serious security vulnerability in version 1.49 and earlier versions of the bouncycastle crypto libraries. I saw that you also maintain voms-api-java for Fedora. Fedora uses an even newer version of bouncycastle and the Fedora and Debian packages appear to be identical otherwise. So in theory your package should work with the newer BC version too. Upstream seems to work on a new release which will be based on BC 1.52. https://github.com/italiangrid/voms-api-java/issues/17 Another option might be to temporarily disable the tests since they appear to be the root cause for the build failures. Regards, Markus -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.2.0-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: unable to detect
--- End Message ---
--- Begin Message ---Source: voms-api-java Source-Version: 3.0.5-3 We believe that the bug you reported is fixed in the latest version of voms-api-java, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 806...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Mattias Ellert <mattias.ell...@fysast.uu.se> (supplier of updated voms-api-java package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 07 Dec 2015 14:41:49 +0100 Source: voms-api-java Binary: libvoms-api-java-java libvoms-api-java-java-doc Architecture: source all Version: 3.0.5-3 Distribution: unstable Urgency: medium Maintainer: Mattias Ellert <mattias.ell...@fysast.uu.se> Changed-By: Mattias Ellert <mattias.ell...@fysast.uu.se> Description: libvoms-api-java-java - Virtual Organization Membership Service Java API libvoms-api-java-java-doc - Virtual Organization Membership Service Java API Documentation Closes: 804998 806920 Changes: voms-api-java (3.0.5-3) unstable; urgency=medium . * Replace mvn-debian with maven-debian-helper (Closes: #804998) * Build using a version of canl-java that was built with the same bouncycastle version (Closes: #806920) Checksums-Sha1: c2937302a7f32ca607ea3f0bbd962034094f95a1 2273 voms-api-java_3.0.5-3.dsc eb2f2a0e459a3d882092723c27cd0f7d93f66605 9468 voms-api-java_3.0.5-3.debian.tar.xz f4c50e025e2b2f693f67970c998612ef456c3d56 137232 libvoms-api-java-java-doc_3.0.5-3_all.deb fe7ddd9827ac3b5d7b67dcb75dbd20934ef14456 130384 libvoms-api-java-java_3.0.5-3_all.deb Checksums-Sha256: 729ebb8c903b3ca702c0274c96382f0d0a1489682a5bc599db4edb0ba75f0873 2273 voms-api-java_3.0.5-3.dsc 558200f9b49934cc56a76f547e1976dbe4d6d52d6ce12c440ba8efed84db7308 9468 voms-api-java_3.0.5-3.debian.tar.xz de1f579c7299aa95225032a21130e8b013b25ab9ef99ed0269abc1206875e69d 137232 libvoms-api-java-java-doc_3.0.5-3_all.deb 04d884917bbfacfb4e9ed2a90590a2df23f9a8cba7161a27775070a5438026fb 130384 libvoms-api-java-java_3.0.5-3_all.deb Files: 825b607198f8b4e9dbf155c7accd1a31 2273 java optional voms-api-java_3.0.5-3.dsc 50a9b7433c023c328a770cda8b54a445 9468 java optional voms-api-java_3.0.5-3.debian.tar.xz 04f550dcd65d3efef4725fc01f62260c 137232 doc optional libvoms-api-java-java-doc_3.0.5-3_all.deb cdb7cccf9ad21bb65dc882e030449820 130384 java optional libvoms-api-java-java_3.0.5-3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJWZ7yMAAoJEOiuwv874alLUkgP/A3MYRMp0SHK4bBdZP3/0cuc 92A/gqyHDOCrTm5mfY2RRuxJqpFbOja8p5Q7GBkkJSj1kyoVjGyzbWyzupcSsCT6 9EqJToFw700FhjFcpSUczkMDSz2bMpV/FoNr0zEi3o1u36vQJ9kx8fCdsn3MRNQb Dn9CX/MBHtqELiCcfTPUQ/Q197zFzTw9kxR+p/n4rVSv5gKlJ3frrBGFDJg0uZzN TWIM0Xw+FbtMtw68dThR+WvYdFq1Fa98soJOpR+cD4OhpPRDRVHgjFP+ig6w+i5L GLlcFiYOMuOFOv5De1ymNcQ03zkwV/lXc/2+MWws0yRS0E9JftV8pZ0EJSWzKBfL wbXCe/UT5exT/T4APvHbKNEfVU6e8LjDNzLgZrk/hfdzgS5XP8T9Ci+vvuveFM8I jyYom2kb/A7TmULwBBE552weZP30AWEK3uhLa9mpv1ai9RFlgQZJ9MxE/LXnFy0D 8m1vMSe5/8eVkdzY99v/rZKJBZ9xoV4z/JBU6p1Ik92ymuFeN/0/LZ52pBj1sKG5 Dpz6onwKCoQ8SWWoZ4uv4+SdDJ0tXiLvfEtcl+iaVU6VlMwtIeImPbK0aRjiH1eO VyZV+lZftFcsbEH4FUofNY1j85F4mTCVDZfzRG35p1NYsooQ9k0QMf9KE3V+u3WC L6W94JnFVv6PPzOCc9qP =cOI1 -----END PGP SIGNATURE-----
--- End Message ---
