Phasing out libnetty-java (was Re: Bug#796114: CVE-2015-2156)
Le Wed, Aug 19, 2015 at 04:59:58PM +0200, Moritz Muehlenhoff a écrit :
> Source: netty
> Severity: grave
> Tags: security
>
> This was assigned CVE-2015-2156:
> http://netty.io/news/2015/05/08/3-9-8-Final-and-3.html
>
> Fix:
> https://github.com/slandelle/netty/commit/800555417e77029dcf8a31d7de44f27b5a8f79b8.patch
>
> In addition to src:netty (3.2.6), there's also src:netty-3.9 (3.9.0)
> and there was also src:netty3.1 at some point (now removed).
>
> Please phase out src:netty towards the updated src:netty-3.9 so that
> there's only one version around.
Hello everybody,
in my understanding, libnetty-java is a relic of when we attempted to package
Eucalyptus in Debian. However, there are two new packages, zookeeper and
bookkeeper, created recently, that depend on libnetty-java instead of the more
recent libnetty-3.9-java.
Is that because of incompatibility ? If libnetty-java is still needed, would
it be possible to transfer it under the umbrella of the Debian Java team ?
Have a nice day,
Charles
--
Charles Plessy
Debian Med packaging team,
http://www.debian.org/devel/debian-med
Tsurumi, Kanagawa, Japan
Reply to: