Bug#1093577: dnssecjava: New upstream version (needs new dependency)

Ingo Bauersachs ingo at jitsi.org
Mon Jan 20 22:59:38 GMT 2025


Andreas Tille wrote on 2025-01-20:
> I tried to upgrade dnssecjava to the latest upstream version (2.0.0) in
> Git but it fails to build due to a new Build-Depends as you can see in
> Salsa CI[1]:
> 

dnssecjava is EOL, archived on GitHub, and is affected by some CVEs.
The code has been merged into dnsjava.

Note that dnsjava is AFAIK currently also removed from unstable because
it too had CVEs. I'm not sure it's worth updating it either. The only
rdep that I'm aware of was JMeter, and last time I checked, that version
was also extremely old in Debian.

If you do want to update dnsjava, please let me know. The newest version
has some build dependencies in the pom that are almost certainly not 
packaged at all or in their current version in Debian, but most of
them should not be necessary to build it (e.g. Spotless, it only checks
that the source code is properly formatted).

Regards,
Ingo



More information about the pkg-java-maintainers mailing list