Re: OpenJDK for Bookworm and beyond

2022-11-08 Thread Moritz Mühlenhoff
Am Thu, Sep 29, 2022 at 02:06:06PM +0200 schrieb Thorsten Glaser: > > Last point, we still have OpenJDK 8 in unstable to help with the > > bootstrapping > > of some packages that can't build directly with the latest JDK (more > > specifically, Kotlin and Scala). Similarly I think we should preserv

Re: OpenJDK for Bookworm and beyond

2022-11-08 Thread Moritz Mühlenhoff
Am Thu, Sep 29, 2022 at 12:00:42PM +0200 schrieb Emmanuel Bourg: > Hi all, Sorry for the late reply, this got backlogged in my inbox. > The first point is to plan when we'll switch the default JDK to OpenJDK 17. > The transition has progressed well, with 113 bugs fixed already, but there > are st

Re: Bug#975016: #975016 - OpenJDK 17 support state for Bullseye

2022-02-10 Thread Moritz Mühlenhoff
Am Thu, Feb 03, 2022 at 03:59:00PM +0100 schrieb Thorsten Glaser: > Hi Holger, > > > and filed against src:debian-security-support, as openjdk-17 seems to be > > supported and src:debian-security-support's purpose is to documented what's > > no, 11 is supported, 17 is just for users to run third-

Re: Bug#975016: OpenJDK 15 support state for Bullseye

2020-11-19 Thread Moritz Mühlenhoff
On Wed, Nov 18, 2020 at 10:31:30PM +0100, Thorsten Glaser wrote: > I think nobody wants to switch default-jdk to 17 or even not ship > 11 at all any more or stop supporting it during bullseye’s lifetime. > Maybe that also was too implicit? Exactly, the supported Java release for the entire Bullsey

Re: OpenJDK 8u242 GA?

2020-02-10 Thread Moritz Mühlenhoff
On Mon, Feb 10, 2020 at 07:17:59PM +0100, Thorsten Glaser wrote: > Hi tony, > > > source package uploaded to Debian unstable against stretch for a > > stretch-security upload. I should be able to complete the builds and > > smoke-tests by the end of the week and will upload once I get the > > go-

Re: openjdk-8 re-uploaded to unstable (currently in NEW)

2019-05-27 Thread Moritz Mühlenhoff
On Sun, May 26, 2019 at 09:13:38PM +0200, Matthias Klose wrote: > The openjdk-8 packages which were unfortunately removed from unstable > (although > the issue #915620 only asked for the removal of some binaries), are now again > in > NEW, targeting unstable. One of the FTP assistants is objecti

Re: Bug#925454: RM: tomcat8 -- ROM; Replaced by tomcat9

2019-03-29 Thread Moritz Mühlenhoff
On Mon, Mar 25, 2019 at 11:18:29AM -0400, Scott Kitterman wrote: > On Monday, March 25, 2019 02:17:15 PM Thorsten Glaser wrote: > > On Mon, 25 Mar 2019, Emmanuel Bourg wrote: > > > Please remove the tomcat8 package from testing and unstable (not > > > experimental). This package has been replaced b

Re: Security update of mysql-connector-java

2016-07-06 Thread Moritz Mühlenhoff
On Wed, Jun 22, 2016 at 06:19:08PM +0200, Markus Koschany wrote: > On 22.06.2016 08:47, Moritz Mühlenhoff wrote: > > On Wed, Jun 22, 2016 at 01:01:14AM +0200, Markus Koschany wrote: > >> On 22.06.2016 00:43, Emmanuel Bourg wrote: > >>> Le 22/06/2016 à

Re: Security update of mysql-connector-java

2016-06-21 Thread Moritz Mühlenhoff
On Wed, Jun 22, 2016 at 01:01:14AM +0200, Markus Koschany wrote: > On 22.06.2016 00:43, Emmanuel Bourg wrote: > > Le 22/06/2016 à 00:28, Markus Koschany a écrit : > > > >> Houston, we have a problem. It seems the latest upstream release > >> requires Java 8 for building JDBC 4. In Jessie even Java

Re: New oldstable-proposed-updates diff: tomcat6 6.0.45+dfsg-1~deb7u1

2016-03-30 Thread Moritz Mühlenhoff
On Tue, Mar 29, 2016 at 11:23:30PM +0200, Markus Koschany wrote: > Am 29.03.2016 um 23:01 schrieb Moritz Mühlenhoff: > > On Tue, Mar 29, 2016 at 10:03:56PM +0200, Markus Koschany wrote: > >> The Security Team decided to mark the issues in Jessie as no-dsa because > >> w

Re: Tomcat 6 security vulnerabilities in Wheezy

2016-03-24 Thread Moritz Mühlenhoff
On Wed, Mar 16, 2016 at 02:21:06PM +0100, Markus Koschany wrote: > Am 14.03.2016 um 23:06 schrieb Moritz Mühlenhoff: > > On Sat, Feb 27, 2016 at 11:45:45PM +0100, Markus Koschany wrote: > >> Hi, > >> > >> as you know Tomcat 6 is affected by new security vu

Re: ActiveMQ security update

2016-03-19 Thread Moritz Mühlenhoff
On Fri, Mar 18, 2016 at 03:28:01PM +0100, Markus Koschany wrote: > Please find attached the debdiff for Wheezy. I have tried to backport > libxstream-java from Jessie to Wheezy but I don't think this is the best > solution anymore. We would need to backport libjdom2-java as well and > change the bu

Re: Tomcat 6 security vulnerabilities in Wheezy

2016-03-14 Thread Moritz Mühlenhoff
On Sat, Feb 27, 2016 at 11:45:45PM +0100, Markus Koschany wrote: > Hi, > > as you know Tomcat 6 is affected by new security vulnerabilities that > are fixed in version 6.0.45. Do you want me to replace the last version > I sent to you regarding Wheezy with this one or shall I upload version > 6.0.

Re: Tomcat 6 security vulnerabilities in Wheezy

2016-02-18 Thread Moritz Mühlenhoff
On Thu, Feb 18, 2016 at 06:24:17PM +0100, Markus Koschany wrote: > Am 18.02.2016 um 18:10 schrieb Emmanuel Bourg: > > Le 18/02/2016 14:45, Markus Koschany a écrit : > > > >> According to [1] Tomcat 6 in Wheezy is still affected by a couple of > >> security vulnerabilities that were already fixed i

Re: jackrabbit CVE-2015-1833

2015-06-28 Thread Moritz Mühlenhoff
On Thu, Jun 25, 2015 at 07:31:27PM +0200, Markus Koschany wrote: > Am 22.06.2015 um 07:58 schrieb tony: > > On Sun, Jun 21, 2015 at 09:29:26PM +0200, Markus Koschany wrote: > >> Hi all, > >> > >> I am looking for someone who is interested in uploading jackrabbit and > >> fixing #787316. > >> > >> P

Re: Tomcat 6 removal

2014-10-29 Thread Moritz Mühlenhoff
On Sat, Oct 25, 2014 at 09:29:16AM -0700, tony mancill wrote: > On 10/25/2014 06:43 AM, Moritz Mühlenhoff wrote: > > On Thu, Oct 23, 2014 at 08:33:38PM -0700, tony mancill wrote: > >> On 10/23/2014 01:28 PM, Moritz Mühlenhoff wrote: > >>> On Wed, Oct 22, 2014 at 02

Re: Tomcat 6 removal

2014-10-25 Thread Moritz Mühlenhoff
On Thu, Oct 23, 2014 at 08:33:38PM -0700, tony mancill wrote: > On 10/23/2014 01:28 PM, Moritz Mühlenhoff wrote: > > On Wed, Oct 22, 2014 at 02:41:55PM +0200, Emmanuel Bourg wrote: > >> Hi all, > >> > >> I've just uploaded an update of the tomcat6 pack

Re: Tomcat 6 removal

2014-10-23 Thread Moritz Mühlenhoff
On Wed, Oct 22, 2014 at 02:41:55PM +0200, Emmanuel Bourg wrote: > Hi all, > > I've just uploaded an update of the tomcat6 package that builds only the > Servlet API (libservlet2.5-java) and no longer the server packages > (tomcat6, libtomcat6-java, etc). So even if the src:tomcat6 package is > sti

Re: Tomcat version for jessie

2014-05-31 Thread Moritz Mühlenhoff
On Mon, Apr 28, 2014 at 04:37:41PM +0200, Salvatore Bonaccorso wrote: > Hi, > > On Mon, Apr 28, 2014 at 02:16:13PM +0200, Emmanuel Bourg wrote: > > Le 28/04/2014 13:22, Moritz Muehlenhoff a écrit : > > > Hi, > > > I noticed that tomcat8 was uploaded into sid. We still have tomcat6 and > > > tomca

Re: openjdk maintenance for wheezy and squeeze

2013-03-24 Thread Moritz Mühlenhoff
Matthias Klose schrieb: >> I'm not familiar with the Java internals, but if we're following that >> approach >> it would make sense to upgrade Wheezy to the version in experimental >> (i.e. 7u15 instead of 7u3). > > I won't upload this myself. IcedTea 7-2.3 uses two hotspot versions, one for > t

Re: openjdk maintenance for wheezy and squeeze

2013-03-05 Thread Moritz Mühlenhoff
Matthias Klose schrieb: > Am 01.03.2013 04:35, schrieb Moritz Mühlenhoff: >> Backporting security fixes with Java has turned out to be more of less >> unfeasible. I tried this once with DSA 2507 and I think that amounted to at >> least >> two man days of work for that

Re: openjdk maintenance for wheezy and squeeze

2013-02-28 Thread Moritz Mühlenhoff
Niels Thykier schrieb: > On 2013-02-17 23:04, Matthias Klose wrote: >> There is a bug report open for openjdk-6 in wheezy (#675495) and squeeze >> didn't >> see any security updates for several months. To summarize, no party >> involved is >> capable or willing to provide security updates based

Re: Tomcat for Squeeze

2012-01-06 Thread Moritz Mühlenhoff
On Thu, Jan 05, 2012 at 02:53:41PM -0430, Miguel Landaeta wrote: > On Thu, Jan 5, 2012 at 1:43 PM, Moritz Muehlenhoff wrote: > > currently there's Tomcat 6 and Tomcat 7 in Wheezy. Will 6 be dropped > > before the Wheezy relese? It would be good to only have one version > > in Wheezy. > > I agree