On Tue, 22 Apr 2025 16:07:59 +0200, Moritz Muehlenhoff wrote:
Your package depends on libpdfbox-java, which is a long EOLed version
with open security issues of what is packaged as libpdfbox2-java for
the current releases of Pdfbox.
Please port your package to use libpdfbox2-java instead.
FWIW, there's an old upstream commit which might be helpful here:
https://github.com/JabRef/jabref/commit/ea8ccb39c73d4f977592eadc5bd3a64c0fafdcab
Cheers,
gregor
--
.''`.
https://info.comodo.priv.at -- Debian Developer
https://www.debian.org
: :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
`. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
`-
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmgJD7VfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgZpFw//RxJxHSpMUaODRkeIn4TexaK++WG+FhirBr2QYw9zo1T++MsdPZFR9Ui2 AQRZJRagSi28FgOWaxykjrZ+Pey43WwvggHAcyqngXTqMHZIAuKTFd2ug/78NRM4 +XQ9AE2c/fPKfb3yCVnjx3qggnxiSfeUyfmj5TXNZpSqPBsXh0B8abb9kuY7oJnH K2dbsrfwavpKRRL3ajm4amCDCzUseaxehZmGwa9l24+3ARrSI+J82X5JfkygEqnX 02fnC22ZW4a++406khkTICpRP1Xi/mRnaEW4Cn2HjUv59poUrJ1I3Z3uVQWfB+BF l9Tvy1jkhQ7gFwdGgIu8MvtMuBIK5atuFUGTKRShpdhLZ3QYsno1KwBj53n+Ps27 667ci88UZgwjmuBay67z0mCZ7WuPX1o2slKsRfEegG91VE+oqTaxSUmbO+9yIyuw 5WlG8rqVGonOZdQlYe4IMfoOm6ClLlMYbN/6sQtYXCd6Fm10ZNggudZgNFwTALm3 cV1M02keYrmk9Rko3U2JSQzc5FwPslNuwlAdGccNn3mDX2sYYTmo3RhTJs58O3bJ FmzH7jzY8IYlbj6WNR4NRYDor/sAo00aROGj8LnvTpem8cMT6b6SrM50iMw3Rna+ SgvTIVN+x2J0PdfrnbEyTY9nzSt0XwossBv9VKqR1No3q6OgkxU=
=YcRk
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)