[Debian-med-packaging] Bug#913323: igv: please switch to libmariadb-java
    Markus Koschany 
    apo at debian.org
       
    Fri Nov  9 15:06:41 GMT 2018
    
    
  
Package: igv
Version: 2.4.14+dfsg-1
Severity: important
Tags: patch
Hello,
we would like to remove libmysql-java from Debian because it is
frequently affected by security vulnerabilities which are not fully
disclosed. This makes it hard to determine the impact of such a flaw.[1]
However we also have libmariadb-java which is a drop-in replacement
and upstream is more transparent about security issues.
Please find attached a patch that makes the necessary changes to
the Debian packaging.
[1] https://bugs.debian.org/912916
-------------- next part --------------
>From 4420b23b2cb2c93d5b821de05e078cf5a8431ca5 Mon Sep 17 00:00:00 2001
From: Markus Koschany <apo at debian.org>
Date: Fri, 9 Nov 2018 16:02:33 +0100
Subject: [PATCH] Replace libmysql-java with libmariadb-java.
---
 debian/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/debian/control b/debian/control
index a3b5948..97d88d1 100644
--- a/debian/control
+++ b/debian/control
@@ -33,7 +33,7 @@ Build-Depends: default-jdk,
                libguava-java,
                libbcprov-java (>= 1.47),
                libjgrapht0.8-java,
-               libmysql-java,
+               libmariadb-java,
                libgoogle-gson-java,
                javahelper,
                libjide-oss-java,
-- 
2.19.1
    
    
More information about the Debian-med-packaging
mailing list