Bug#800992: libreoffice: depends on obsolete libcommons-httpclient-java library

[Rene Engelhard <rene@debian.org>]

reassign 800992 src:libreoffice
tag 800992 + upstream
forwarded 800992 https://bugs.documentfoundation.org/show_bug.cgi?id=94791
thanks

Hi,

On Mon, Oct 05, 2015 at 04:51:47PM +0200, apo@gambaru.de wrote:
> libreoffice depends on libcommons-httpclient-java, which is obsolete and was
> replaced by libhttpclient-java. It has reached EOL status in 2011! It is no
> longer supported upstream [1] and was affected by multiple security issues in
> the recent past. libreoffice should be ported to the new libhttpclient-java
> version, so that we can remove the old, unmaintained one. Please forward this
> issue upstream, if you can't migrate the package yourself.

This is, afaics, for the carried-over-from-Sun-times wiki publisher
extension...

  ifeq "$(ENABLE_MEDIAWIKI)" "y"
        CONFIGURE_FLAGS += --enable-ext-wiki-publisher
    ifneq (,$(filter apache-commons, $(SYSTEM_STUFF)))
        MEDIAWIKI_BUILD_DEPS += , libcommons-codec-java$(OOO_NO_JAVA_ARCHS), libcommons-httpclient-java$(OOO_NO_JAVA_ARCHS), libcommons-lang-java$(OOO_NO_JAVA_ARCHS), libcommons-logging-java$(OOO_NO_JAVA_ARCHS)
        MEDIAWIKI_JAR_DEPENDS := , libcommons-codec-java, libcommons-httpclient-java, libcommons-lang-java, libcommons-logging-java
        BUILD_DEPS_INDEP += $(MEDIAWIKI_BUILD_DEPS)
        CONFIGURE_FLAGS += --with-commons-codec-jar=/usr/share/java/commons-codec.jar --with-commons-lang-jar=/usr/share/java/commons-lang.jar --with-commons-httpclient-jar=/usr/share/java/commons-httpclient.jar --with-commons-logging-jar=/usr/share/java/commons-logging.jar
    endif
  endif

Will forward, but tbh I don't have much hope, there isn't much development
going on here - just cleanups:
http://cgit.freedesktop.org/libreoffice/core/log/swext

Regards,

Rene