Hi, I think we should file bug reports and start replacing libcommons-httpclient-java with libhttpclient-java.
Reasoning: commons-httpclient is obsolete and has been EOL since 2011. It is no longer supported and was/is affected by multiple security issues. [1] I suggest to file bug reports with severity "Important" and to raise the severity to serious when the list of rdeps is small. The goal is to remove libcommons-httpclient-java during the Stretch release cycle. Most of the 34 reverse-dependencies [2] are maintained by us. Complete dd-list is attached. There are more packages which should be removed (libservlet2.5-java comes to mind). More ideas? My proposed bug report template: Tags: sid stretch User: [email protected] Usertags: oldlibs commons-httpclient Hi, #PACKAGE# depends on libcommons-httpclient-java, which is obsolete and has reached EOL status since 2011. It is no longer supported upstream and was affected by multiple security issues in the recent past. #PACKAGE# should be ported to the new libhttpclient-java version, so that we can remove the old, unmaintained one. Please try to do this before the Stretch release as we are going to try to remove libcommons-httpclient-java this cycle. We will bump this issue to serious when the list of rdeps is small and we are getting ready to remove libcommons-httpclient-java completely. If you have any questions don't hesitate to ask. On behalf of the Debian Java Maintainers Markus [1] https://bugs.debian.org/781063 [2] not-yet-commons-ssl ivy ant-contrib netbeans wsdl2c activemq commons-vfs libspring-java jenkins-json libxmlrpc3-java jftp wagon jajuk spring-build wagon2 libexml-java jenkins axis jackrabbit eclipse mule maven-docck-plugin biomaj triplea openid4java lucene-solr libjboss-common-java jets3t jenkins-htmlunit libreoffice libowasp-antisamy-java jakarta-jmeter jabsorb jspwiki
Adnan Hodzic <[email protected]> eclipse (U) jspwiki (U) Andres Mejia <[email protected]> eclipse (U) Andrew Ross <[email protected]> netbeans (U) Brian Thomason <[email protected]> mule (U) wsdl2c (U) Charles Plessy <[email protected]> mule (U) Chris Grzegorczyk <[email protected]> mule (U) Chris Halls <[email protected]> libreoffice (U) Damien Raude-Morvan <[email protected]> activemq (U) axis (U) commons-vfs (U) jackrabbit (U) jajuk (U) libspring-java (U) libxmlrpc3-java (U) spring-build wagon2 (U) Debian Eucalyptus Maintainers <[email protected]> mule wsdl2c Debian Java maintainers <[email protected]> jftp Debian Java Maintainers <[email protected]> activemq ant-contrib axis commons-vfs ivy jabsorb jackrabbit jajuk jakarta-jmeter jenkins jenkins-htmlunit jenkins-json jets3t jspwiki libexml-java libjboss-common-java libowasp-antisamy-java libspring-java libxmlrpc3-java lucene-solr maven-docck-plugin netbeans not-yet-commons-ssl openid4java triplea wagon wagon2 Debian LibreOffice Maintainers <[email protected]> libreoffice Debian Med Packaging Team <[email protected]> biomaj Debian Orbital Alignment Team <[email protected]> eclipse Emmanuel Bourg <[email protected]> axis (U) jakarta-jmeter (U) libxmlrpc3-java (U) wagon (U) wagon2 (U) Graziano Obertelli <[email protected]> mule (U) Jakub Adam <[email protected]> axis (U) eclipse (U) libxmlrpc3-java (U) lucene-solr (U) James Page <[email protected]> ant-contrib (U) James Page <[email protected]> jenkins (U) jenkins-htmlunit (U) lucene-solr (U) James Page <[email protected]> jenkins-json (U) Jimmy Kaplowitz <[email protected]> eclipse (U) Kalle Kivimaa <[email protected]> jabsorb (U) Kumar Appaiah <[email protected]> jftp (U) Kyo Lee <[email protected]> mule (U) Ludovic Claude <[email protected]> ivy (U) maven-docck-plugin (U) wagon (U) Markus Koschany <[email protected]> netbeans (U) Mat Scales <[email protected]> lucene-solr (U) Matthew Vernon <[email protected]> libowasp-antisamy-java (U) not-yet-commons-ssl (U) Miguel Landaeta <[email protected]> ivy (U) jets3t (U) Miguel Landaeta <[email protected]> libspring-java (U) openid4java (U) Niels Thykier <[email protected]> eclipse (U) jabsorb (U) jftp (U) libjboss-common-java (U) Olivier Sallou <[email protected]> biomaj (U) Olivier Weinstoerffer <[email protected]> openid4java (U) Onkar Shinde <[email protected]> jakarta-jmeter (U) Rene Engelhard <[email protected]> libreoffice (U) Scott Howard <[email protected]> triplea (U) Steffen Moeller <[email protected]> mule (U) Torsten Werner <[email protected]> axis (U) ivy (U) jajuk (U) libjboss-common-java (U) libxmlrpc3-java (U) wagon (U) Varun Hiremath <[email protected]> ivy (U) jajuk (U) jftp (U) libexml-java (U) libjboss-common-java (U) Xavier Oswald <[email protected]> openid4java (U)
signature.asc
Description: OpenPGP digital signature
