starts pulling OpenJDK into CDs

Bug #619858 reported by Martin Pitt
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openoffice.org (Ubuntu)
Fix Released
High
Unassigned
Maverick
Fix Released
High
Unassigned
openoffice.org-l10n (Ubuntu)
Fix Released
High
Martin Pitt
Maverick
Fix Released
High
Martin Pitt

Bug Description

A few days ago the Ubuntu CDs (both desktop and alternate) got massively oversized, due to openjdk now being pulled into the images. This is due to openoffice.org-help-en-us and -writer which pushed the openoffice.org-java-common Suggests: to Recommends:. This needs to be reverted.

CVE References

Martin Pitt (pitti)
Changed in openoffice.org-l10n (Ubuntu Maverick):
importance: Undecided → High
status: New → Triaged
milestone: none → ubuntu-10.10-beta
assignee: nobody → Canonical Desktop Team (canonical-desktop-team)
Revision history for this message
Martin Pitt (pitti) wrote :

This affects openoffice.org-writer as well, so we need upload both source packages.

There are unreleased changes in bzr (which I can't commit to), so I'll just prepare and test a debdiff and attach it here.

Changed in openoffice.org (Ubuntu Maverick):
importance: Undecided → High
status: New → Triaged
Martin Pitt (pitti)
Changed in openoffice.org-l10n (Ubuntu Maverick):
assignee: Canonical Desktop Team (canonical-desktop-team) → Martin Pitt (pitti)
status: Triaged → In Progress
Changed in openoffice.org (Ubuntu Maverick):
status: Triaged → In Progress
milestone: none → ubuntu-10.10-beta
description: updated
Matthias Klose (doko)
Changed in openoffice.org (Ubuntu Maverick):
status: In Progress → Fix Committed
Changed in openoffice.org-l10n (Ubuntu Maverick):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openoffice.org - 1:3.2.1-6ubuntu1

---------------
openoffice.org (1:3.2.1-6ubuntu1) maverick; urgency=high

  [ Matthias Klose ]
  * Merge with Debian 1:3.2.1-6.
  * debian/control.in: Set Vcs-* attributes.
  * debian/rules: Use some internal components to build on lucid.
  * Fix position and color of progress bar in the splash screen. LP: #616879.
  * Update ooo-build to 2010-08-19.
  * Use --hash-style=gnu for Ubuntu lucid and maverick for linking.
  * debian/rules: Always be verbose, even on the buildds (apparently dropped
    after 1:3.2.0-4ubuntu1).
  * Build using gcc-4.5 in maverick.

  [ Martin Pitt ]
  * debian/control.in, debian/control.help.in: Move Java dependencies of
    -writer and -help-* back from Recommends to Suggests; they made the CDs
    explode. (LP: #619858)

openoffice.org (1:3.2.1-6) unstable; urgency=high

  * debian/patches/reduce-height-on-dialogs-for-netbooks.diff: add
    patch from ooo-build-3-2-1 branch to reduce the PDF export and Recovery
    dialogs to fit on Netbooks (closes: #531930)
  * debian/patches/regcomp-fix-spelling.diff: succesful -> successful
    (closes: #593440)
  * debian/patches/shift-translations.diff: some translations must be shifted
    in the itemlist; backported from ooo-build-3-2-1 branch (closes: #593234)
  * debian/patches/SA40775.diff: fix CVE-2010-2935 and CVE-2010-2936
    aka SA40775: two buffer-overflow vulnerabilities in OpenOffice.org Impress

  * merge from Ubuntu (thanks Loic Minier):
    - Pass the same -v to "dh_makeshlibs --" (for dpkg-gensymbols) as to
      "dh_gencontrol --" (for dpkg-gencontrol); some symbols are missing from
      the symbols files and hence ure symbols have bogus dep on ure >=
      source-version which can't be satisfied as ure uses another versioning
      scheme
 -- Matthias Klose <email address hidden> Tue, 24 Aug 2010 10:52:49 +0200

Changed in openoffice.org (Ubuntu Maverick):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openoffice.org-l10n - 1:3.2.1-6ubuntu1

---------------
openoffice.org-l10n (1:3.2.1-6ubuntu1) maverick; urgency=low

  * Copy of the openoffice.org source.
    - debian/changelog: Change source name.
    - debian/control.in: Change source name.
    - debian/control: Regenerated by "$ debian/rules control"
  * Build files corresponding to openoffice.org 1:3.2.1-6ubuntu1.

openoffice.org (1:3.2.1-6ubuntu1) maverick; urgency=high

  [ Matthias Klose ]
  * Merge with Debian 1:3.2.1-6.
  * debian/control.in: Set Vcs-* attributes.
  * debian/rules: Use some internal components to build on lucid.
  * Fix position and color of progress bar in the splash screen. LP: #616879.
  * Update ooo-build to 2010-08-19.
  * Use --hash-style=gnu for Ubuntu lucid and maverick for linking.
  * debian/rules: Always be verbose, even on the buildds (apparently dropped
    after 1:3.2.0-4ubuntu1).
  * Build using gcc-4.5 in maverick.

  [ Martin Pitt ]
  * debian/control.in, debian/control.help.in: Move Java dependencies of
    -writer and -help-* back from Recommends to Suggests; they made the CDs
    explode. (LP: #619858)

openoffice.org (1:3.2.1-6) unstable; urgency=high

  * debian/patches/reduce-height-on-dialogs-for-netbooks.diff: add
    patch from ooo-build-3-2-1 branch to reduce the PDF export and Recovery
    dialogs to fit on Netbooks (closes: #531930)
  * debian/patches/regcomp-fix-spelling.diff: succesful -> successful
    (closes: #593440)
  * debian/patches/shift-translations.diff: some translations must be shifted
    in the itemlist; backported from ooo-build-3-2-1 branch (closes: #593234)
  * debian/patches/SA40775.diff: fix CVE-2010-2935 and CVE-2010-2936
    aka SA40775: two buffer-overflow vulnerabilities in OpenOffice.org Impress

  * merge from Ubuntu (thanks Loic Minier):
    - Pass the same -v to "dh_makeshlibs --" (for dpkg-gensymbols) as to
      "dh_gencontrol --" (for dpkg-gencontrol); some symbols are missing from
      the symbols files and hence ure symbols have bogus dep on ure >=
      source-version which can't be satisfied as ure uses another versioning
      scheme
 -- Matthias Klose <email address hidden> Tue, 24 Aug 2010 11:44:01 +0200

Changed in openoffice.org-l10n (Ubuntu Maverick):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.