Bug#1103889: Please switch to libpdfbox2-java
gregor herrmann
gregoa at debian.org
Wed Apr 23 17:05:03 BST 2025
On Tue, 22 Apr 2025 16:07:59 +0200, Moritz Muehlenhoff wrote:
>Your package depends on libpdfbox-java, which is a long EOLed version
>with open security issues of what is packaged as libpdfbox2-java for
>the current releases of Pdfbox.
>
>Please port your package to use libpdfbox2-java instead.
FWIW, there's an old upstream commit which might be helpful here:
https://github.com/JabRef/jabref/commit/ea8ccb39c73d4f977592eadc5bd3a64c0fafdcab
Cheers,
gregor
--
.''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
: :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
`. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
`-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20250423/1a59f56b/attachment.sig>
More information about the pkg-java-maintainers
mailing list