← Back to team overview

openjdk team mailing list archive

Bug#780665: openjdk-7-jre-headless: stable-security update to openjdk-7-jre-headless introduced pulseaudio dependency

 

Package: openjdk-7-jre-headless
Version: 7u75-2.5.4-1~deb7u1
Severity: normal

Hi,

I've just applied the recommended update to openjdk-7-jre-headless in
stable (from 7u65-2.5.1-5~deb7u1 to 7u75-2.5.4-1~deb7u1). This update
introduces a dependency on libpulse0 (>= 0.99.1), which I think is a
problem for two reasons:

a) this is the headless package, so surely it shouldn't have the sound
   stuff available

b) this new dependency means the package is held back from 'apt-get
   upgrade', and so will be passed over by many unattended upgrade
   scenarios

I've tried to trace through the changelog to see when this was introduced
but I've struggled, not least because the changelog links for the package
are broken on packages.debian.org.


Thanks,


-- System Information:
Debian Release: 7.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.18.5-x86_64-linode52 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openjdk-7-jre-headless depends on:
ii  ca-certificates-java  20121112+nmu2
ii  java-common           0.47
ii  libc6                 2.13-38+deb7u8
ii  libcups2              1.5.3-5+deb7u5
ii  libfontconfig1        2.9.0-7.1
ii  libfreetype6          2.4.9-1.1+deb7u1
ii  libgcc1               1:4.7.2-5
ii  libglib2.0-0          2.33.12+really2.32.4-5
ii  libjpeg8              8d-1+deb7u1
ii  libkrb5-3             1.10.1+dfsg-5+deb7u3
ii  liblcms2-2            2.2+git20110628-2.2+deb7u1
ii  libnss3               2:3.14.5-1+deb7u4
ii  libpcsclite1          1.8.4-1+deb7u1
ii  libpulse0             2.0-6.1
ii  libstdc++6            4.7.2-5
ii  multiarch-support     2.13-38+deb7u8
ii  tzdata-java           2015a-0wheezy1
ii  zlib1g                1:1.2.7.dfsg-13

openjdk-7-jre-headless recommends no packages.

Versions of packages openjdk-7-jre-headless suggests:
pn  fonts-ipafont-gothic               <none>
pn  fonts-ipafont-mincho               <none>
pn  icedtea-7-jre-jamvm                <none>
pn  libnss-mdns                        <none>
pn  sun-java6-fonts                    <none>
pn  ttf-dejavu-extra                   <none>
pn  ttf-indic-fonts                    <none>
pn  ttf-wqy-microhei | ttf-wqy-zenhei  <none>

-- no debconf information