Debian Bug report logs - #684453
hand over packaging to debian-java team

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Thomas Koch <thomas@koch.ro>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: hand over packaging to debian-java team

Date: Fri, 10 Aug 2012 08:45:40 +0200

Package: libgwt-dev-java
Version: 2.4.0-1
Severity: wishlist

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

I've asked on the pkg-eucalyptus list whether gwt could be handed over to the
Debian-Java team[1]. Charles Plessy responded in favour of the request[2].

I'll have some time again in two weeks to continue working on gwt and would like
to salvage[3] the package then under the debian-java umbrella. Please respond to
this bug if you disagree (or agree).

[1] http://lists.alioth.debian.org/pipermail/pkg-eucalyptus-maintainers/2012-July/000654.html
[2] http://lists.alioth.debian.org/pipermail/pkg-eucalyptus-maintainers/2012-July/000655.html
[3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681833

Regards, Thomas Koch

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=laEb
-----END PGP SIGNATURE-----

Message #10 received at 684453@bugs.debian.org (full text, mbox, reply):

From: Charles Plessy <plessy@debian.org>

To: Thomas Koch <thomas@koch.ro>, 684453@bugs.debian.org

Subject: Re: [pkg-eucalyptus-maintainers] Bug#684453: hand over packaging to debian-java team

Date: Sat, 18 Aug 2012 11:05:51 +0900

Le Fri, Aug 10, 2012 at 08:45:40AM +0200, Thomas Koch a écrit :
> 
> I'll have some time again in two weeks to continue working on gwt and would like
> to salvage[3] the package then under the debian-java umbrella. Please respond to
> this bug if you disagree (or agree).

Hello everybody,

In my understading, the consensus is that Thomas goes ahead with transferring
the package to the debian-java team, where many of us are already members, with
a bit of care of not making an upload that would break eucalyptus while we are
still considering asking for a freeze exception.

Thomas, thank you very much for your patience.

Have a nice week-end,

-- 
Charles Plessy
Tsurumi, Kanagawa, Japan

Message #15 received at 684453@bugs.debian.org (full text, mbox, reply):

From: "Steffen Möller" <steffen_moeller@gmx.de>

To: 684453@bugs.debian.org

Subject: Re: [pkg-eucalyptus-maintainers] Bug#684453: Bug#684453: hand over packaging to debian-java team

Date: Sat, 18 Aug 2012 11:40:50 +0200

Hello,

-------- Original-Nachricht --------
> Datum: Sat, 18 Aug 2012 11:05:51 +0900
> Von: Charles Plessy <plessy@debian.org>
> An: Thomas Koch <thomas@koch.ro>, 684453@bugs.debian.org
> Betreff: [pkg-eucalyptus-maintainers] Bug#684453: Bug#684453: hand over	packaging to debian-java team

> Le Fri, Aug 10, 2012 at 08:45:40AM +0200, Thomas Koch a écrit :
> > 
> > I'll have some time again in two weeks to continue working on gwt and
> would like
> > to salvage[3] the package then under the debian-java umbrella. Please
> respond to
> > this bug if you disagree (or agree).
> 
> In my understading, the consensus is that Thomas goes ahead with
> transferring
> the package to the debian-java team, where many of us are already members,
> with
> a bit of care of not making an upload that would break eucalyptus while we
> are
> still considering asking for a freeze exception.

We had not talked about it, but knowing of everyone's ambition to integrate as much as reasonably possible with the Open Source world, I do not see why to object about it - but there is no autoroute to a freeze exception.

It would be nice for you to test that indeed there is no disturbance of any reverse dependencies by your changes. Pleae be aware, the update of hibernate by pkg-java has killed the upload of Eucalyptus 1.6 to Squeeze before by a situation just like this "should be compatible". It was not. I would hence object any freeze exception unless Brian confirms also the runtime compatibility. Talk to Brian directly about everything, please.
 
> Thomas, thank you very much for your patience.
Yip! Needs more of it, though.

Steffen

Message #20 received at 684453@bugs.debian.org (full text, mbox, reply):

From: Brian Thomason <brian.thomason@eucalyptus.com>

To: Steffen Möller <steffen_moeller@gmx.de>, 684453@bugs.debian.org

Subject: Re: [pkg-eucalyptus-maintainers] Bug#684453: Bug#684453: Bug#684453: hand over packaging to debian-java team

Date: Sat, 18 Aug 2012 11:49:30 -0400

[Message part 1 (text/plain, inline)]

Hi All,

Sorry for the radio silence.  I was waiting to see if we could get
guava-gwt done before handing over to Debian-Java, but it looks like that
may still be a while yet unless someone from Debian java jumps in and helps
out. Apparently there are some differences with some Java primitives in
Sun's JDK, which google uses to compile, and OpenJDK, that are preventing
us from packaging it.

On Sat, Aug 18, 2012 at 5:40 AM, Steffen Möller <steffen_moeller@gmx.de>wrote:

> Hello,
>
> -------- Original-Nachricht --------
> > Datum: Sat, 18 Aug 2012 11:05:51 +0900
> > Von: Charles Plessy <plessy@debian.org>
> > An: Thomas Koch <thomas@koch.ro>, 684453@bugs.debian.org
> > Betreff: [pkg-eucalyptus-maintainers] Bug#684453: Bug#684453: hand over
>       packaging to debian-java team
>
> > Le Fri, Aug 10, 2012 at 08:45:40AM +0200, Thomas Koch a écrit :
> > >
> > > I'll have some time again in two weeks to continue working on gwt and
> > would like
> > > to salvage[3] the package then under the debian-java umbrella. Please
> > respond to
> > > this bug if you disagree (or agree).
> >
> > In my understading, the consensus is that Thomas goes ahead with
> > transferring
> > the package to the debian-java team, where many of us are already
> members,
> > with
> > a bit of care of not making an upload that would break eucalyptus while
> we
> > are
> > still considering asking for a freeze exception.
>
> We had not talked about it, but knowing of everyone's ambition to
> integrate as much as reasonably possible with the Open Source world, I do
> not see why to object about it - but there is no autoroute to a freeze
> exception.
>
> It would be nice for you to test that indeed there is no disturbance of
> any reverse dependencies by your changes. Pleae be aware, the update of
> hibernate by pkg-java has killed the upload of Eucalyptus 1.6 to Squeeze
> before by a situation just like this "should be compatible". It was not. I
> would hence object any freeze exception unless Brian confirms also the
> runtime compatibility. Talk to Brian directly about everything, please.
>
> > Thomas, thank you very much for your patience.
> Yip! Needs more of it, though.
>
> Steffen
>
> _______________________________________________
> pkg-eucalyptus-maintainers mailing list
> pkg-eucalyptus-maintainers@lists.alioth.debian.org
>
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-eucalyptus-maintainers

[Message part 2 (text/html, inline)]

Message #25 received at 684453@bugs.debian.org (full text, mbox, reply):

From: "brian.thomason@gmail.com" <brian.thomason@gmail.com>

To: Thomas Koch <thomas@koch.ro>, 684453@bugs.debian.org

Cc: Debian Bug Tracking System <submit@bugs.debian.org>, Debian Eucalyptus Maintainers <pkg-eucalyptus-maintainers@lists.alioth.debian.org>, Chris Halls <chris.halls@credativ.co.uk>

Subject: Re: [pkg-eucalyptus-maintainers] Bug#684453: hand over packaging to debian-java team

Date: Tue, 28 Aug 2012 11:34:25 -0400

Hi Thomas,

We're more than happy to hand over GWT at this point.  I was trying to
get all the GWT bindings for guava done before doing so, but I think
I'm at a good place with that now too and should have them packaged by
the end of the week if all goes well.

Chris may be working on this bug:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685587

We thought we had worked all of those out.  Perhaps you can give this
a quick look too if you have the time?

We very much appreciate the debian-java team stepping in here!

-Brian

On Fri, Aug 10, 2012 at 2:45 AM, Thomas Koch <thomas@koch.ro> wrote:
> Package: libgwt-dev-java
> Version: 2.4.0-1
> Severity: wishlist
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hi,
>
> I've asked on the pkg-eucalyptus list whether gwt could be handed over to the
> Debian-Java team[1]. Charles Plessy responded in favour of the request[2].
>
> I'll have some time again in two weeks to continue working on gwt and would like
> to salvage[3] the package then under the debian-java umbrella. Please respond to
> this bug if you disagree (or agree).
>
> [1] http://lists.alioth.debian.org/pipermail/pkg-eucalyptus-maintainers/2012-July/000654.html
> [2] http://lists.alioth.debian.org/pipermail/pkg-eucalyptus-maintainers/2012-July/000655.html
> [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681833
>
> Regards, Thomas Koch
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.12 (GNU/Linux)
>
> iQIcBAEBCAAGBQJQJK4QAAoJEAf8SJEEK6ZaB/YP/RKXqp2fT8b/44q9Iv61egzb
> yfTlaJ6vLNW8eXepZA+2t/q5gftmSIgGdo5xssUQL7uAWy7ocluqOdZH/0+L6Vzb
> worRZgS6HTP/Uom/tRrFcvtiqj5+mO82GYvktBjbfrsq0UHRtOw3Mq8+Z9hMjzzC
> E2lIwynAhhM07KCofCC8d5IsZdYyaV5mKeSGeoVOZIjdCiiCn9ESSsiIRMbLQf2n
> 6mT8QRxdIBDtFXUoInmaOs8RVISd83pxM96ignYdXV0fF00gIeGmFYKhrvBo0DX0
> XY1jafvG2QS9hKDlhUkmTEoytCBuwiZ2Jkd2HODdW1mM7MsLCInTMXf7O9AdVCgY
> nWKjEa3oiJT+j04jyGuewIFI5uG8GEZ2afgfksoWiMK+7F7U6FZlI7mCy48BR/md
> VexQ0sG3qcW4EsQ2UN7yRZqKrddrasUqK3XLYNHu+HLsSLdQB2iwN9ln9aoyQUGE
> Sarg8AyDESYM8MlI4xewbPhy5Lq8eCSWJM93PovXeaDrcvpfytipyfw7eIw8YdwX
> obADWAI/oMDMh7s6teGWPEtLLk0w12r8f+Ti5iwJBLk4i+f4eV8uSr2BHqvOIm0N
> +rwrLpCoi+ode9hQdpX2hSpL+heMpX0P7drJYNxLYKWWixt8UBd+KiSZE4uBmzcs
> ga0+lbhIrqFJPTXvGs/W
> =laEb
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> pkg-eucalyptus-maintainers mailing list
> pkg-eucalyptus-maintainers@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-eucalyptus-maintainers

Message #30 received at 684453@bugs.debian.org (full text, mbox, reply):

From: Thomas Koch <thomas@koch.ro>

To: 684453@bugs.debian.org

Subject: blocked by dpkg

Date: Tue, 16 Oct 2012 16:10:47 +0200

control: block -1 by 683547

The dpkg version currently in unstable refuses to build gwt. A patch for dpkg 
is already committed to git and a new dpkg version should be uploaded this 
month.

However it would also be a good thing to clean up debian/patches. Some patches 
introduce changes that other patches remove again.

Thomas Koch, http://www.koch.ro

Message #37 received at 684453@bugs.debian.org (full text, mbox, reply):

From: Charles Plessy <plessy@debian.org>

To: 684453@bugs.debian.org, Thomas Koch <thomas@koch.ro>

Cc: 691900@bugs.debian.org, debian-java@lists.debian.org

Subject: Re: [pkg-eucalyptus-maintainers] Bug#691900: gwt: CVE-2012-4563

Date: Fri, 2 Nov 2012 10:05:37 +0900

Le Wed, Oct 31, 2012 at 07:47:07AM +0100, Moritz Muehlenhoff a écrit :
> Package: gwt
> Severity: grave
> Tags: security
> Justification: user security hole
> 
> Please see https://developers.google.com/web-toolkit/release-notes#Release_Notes_2_4_0
> under "Security vulnerability in GWT 2.4".
> 
> This was assigned CVE-2012-4563

Dear Thomas and Java team

In http://bugs.debian.org/684453, you have suggested to transfer the gwt
package under the debian-java umbrella.  We agreed, and action was delayed by a
technical problem on the Dpkg side.

It is a bit embarassing to ping you with a grave bug, but if you would like to
take over the package, this is the good moment...

In particular I do not know if the best resolution for this bug is to upgrade
to 2.5.0 or to patch, so I am reluctant to take action by myself, worrying that
I might complicate your work on Gerrit.

Please let me know if I can help,

-- 
Charles Plessy
Tsurumi, Kanagawa, Japan

Message #42 received at 684453@bugs.debian.org (full text, mbox, reply):

From: Thomas Koch <thomas@koch.ro>

To: Charles Plessy <plessy@debian.org>

Cc: 684453@bugs.debian.org, 691900@bugs.debian.org, debian-java@lists.debian.org

Subject: Re: [pkg-eucalyptus-maintainers] Bug#691900: gwt: CVE-2012-4563

Date: Fri, 2 Nov 2012 07:43:19 +0100

Charles Plessy:
> Dear Thomas and Java team
> 
> In http://bugs.debian.org/684453, you have suggested to transfer the gwt
> package under the debian-java umbrella.  We agreed, and action was delayed
> by a technical problem on the Dpkg side.
> 
> It is a bit embarassing to ping you with a grave bug, but if you would like
> to take over the package, this is the good moment...
> 
> In particular I do not know if the best resolution for this bug is to
> upgrade to 2.5.0 or to patch, so I am reluctant to take action by myself,
> worrying that I might complicate your work on Gerrit.

Hi Charles,

thank you for pinging me. I've just spend three days on Debian work. Could you 
deal with it by updating to 2.5.0 and also set the maintainer to the java 
packaging team?

There's also a Git repo at 
http://anonscm.debian.org/gitweb/?p=pkg-java/gwt.git
The branch thkoch_patches contains commits to publish the maven artifacts.

I've also filled a bug at Gerrit and asked them to update to gwt 2.5

Regards,

Thomas Koch, http://www.koch.ro

Message #47 received at 684453-done@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 681923-done@bugs.debian.org,684453-done@bugs.debian.org,685587-done@bugs.debian.org,691900-done@bugs.debian.org,692565-done@bugs.debian.org,697193-done@bugs.debian.org,713162-done@bugs.debian.org,

Cc: gwt@packages.debian.org, gwt@packages.qa.debian.org

Subject: Bug#718911: Removed package(s) from unstable

Date: Fri, 09 Aug 2013 06:53:33 +0000

Version: 2.4.0-1+rm

Dear submitter,

as the package gwt has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see http://bugs.debian.org/718911

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Ansgar Burchardt (the ftpmaster behind the curtain)

Message #52 received at 684453@bugs.debian.org (full text, mbox, reply):

From: Charles Plessy <plessy@debian.org>

To: pkg-eucalyptus-maintainers@lists.alioth.debian.org, 684453@bugs.debian.org, debian-java@lists.debian.org

Subject: GWT removed from Debian.

Date: Sat, 10 Aug 2013 10:33:32 +0900

Hi all,

as you noticed, GWT was removed from Debian because we could not keep
the package up to date and free from security-related bugs.

In light with the discussion in #684453, I think that if the package is
reintroduced, it will be better to do so under the Java team.

Have a nice week-end,

-- 
Charles Plessy
Tsurumi, Kanagawa, Japan

Send a report that this bug log contains spam.