Dear maintainer:

During a rebuild of all packages in unstable, this package failed to build.

Below you will find the last part of the build log (probably the most
relevant part, but not necessarily). If required, the full build log
is available here:

https://people.debian.org/~sanvila/build-logs/202609/

About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.

If you cannot reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.

If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:libmina-sshd-java, so that this is still
visible in the BTS web page for this package.

Thanks.
--------------------------------------------------------------------------------
[...]
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  8.188 s
[INFO] Finished at: 2026-09-26T10:45:00Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-compiler-plugin:3.13.0:testCompile (default-testCompile) on project sshd-common: Compilation failure
[ERROR] /<<PKGBUILDDIR>>/sshd-common/src/test/java/org/apache/sshd/util/test/JUnitTestSupport.java:[120,57] cannot access org.slf4j.spi.LoggingEventAware
[ERROR]   class file for org.slf4j.spi.LoggingEventAware not found
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <args> -rf :sshd-common
dh_auto_build: error: /usr/lib/jvm/default-java/bin/java -noverify -cp /usr/share/maven/boot/plexus-classworlds-2.x.jar -Dmaven.home=/usr/share/maven -Dmaven.multiModuleProjectDirectory=/<<PKGBUILDDIR>> -Dclassworlds.conf=/etc/maven/m2-debian.conf org.codehaus.plexus.classworlds.launcher.Launcher -s/etc/maven/settings-debian.xml -Ddebian.dir=/<<PKGBUILDDIR>>/debian -Dmaven.repo.local=/<<PKGBUILDDIR>>/debian/maven-repo --batch-mode package -DskipTests -Dnotimestamp=true -Dlocale=en_US returned exit code 1
make: *** [debian/rules:7: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2
--------------------------------------------------------------------------------

Hi,

I am reassigning this bug to logback. Its jar files have no classpath
entries, although they should (to import slf4j classes for instance).

This is affecting the build of libmina-sshd-java, but also the
autopktest of trapperkeeper-clojure/5.0.6-1, preventing migration of
logback to testing.

Cheers,

Hi Pierre,

I'm sorry to ping-pong this issue back to you, but this FTBFS problem is
not caused by a bug in the logback package.

I don't believe the proposed solution would solve the FTBFS.

What works is to add one line to debian/maven.rules in
src:libmina-sshd-java (see attached patch) to have Maven to load slf4j
2.x on its classpath and allow the build to succeed. This is sufficient
to fix the FTBFS.

I also suggest modifications to debian/libmina-sshd-java.classpath to
ensure the correct version of slf4j is present on the classpath when the
program is launched using "java -jar".
trapperkeeper-clojure was similar and was also fixed in the latest
release with a patch fixing the build environment.

BTW I tried building src:libmina-sshd-java from Salsa sources with
git-buildpackage but it didn't work: gbp export-orig failed with errors
from pristine-tar when it attempted to generate the orig tarball.

Thanks,

Hi Jérôme,

Thanks for looking into this issue, it is much appreciated! Also thanks
for looking at libmina-sshd-java.

Le 15/10/2026 à 06:28, Jérôme Charaoui a écrit :

I see it a bit differently. In my view, there is an issue with logback
itself, as it was upgraded and this broke the build of rdeps.
Debian Java policy says "All jar files must have a well-documented
CLASSPATH", which definitely makes sense as one expects the libs to come
with their dependencies properly declared, as Debian policy 8.6 requires
for C/C++ libs. In C/C++ shared objects the NEEDED attribute lists the
other shared objects of which symbols are needed.
Moreover, requiring maintainers of (possibly multiple) rdeps of logback
to work around an issue in logback itself doesn't seem ideal.

It turns out that the proposed solution fixes the issue, and I plan to
upload the package shortly.

You're right, something was messed up with the last orig import... I
plan to upgrade libmina-sshd-java soon and that will solve this.

All the best,

We believe that the bug you reported is fixed in the latest version of
logback, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1149452@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Pierre Gruet <pgt@debian.org> (supplier of updated logback package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 17 Oct 2026 11:15:41 +0200
Source: logback
Architecture: source
Version: 1:1.6.3-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Pierre Gruet <pgt@debian.org>
Closes: 1149452
Changes:
 logback (1:1.6.3-3) unstable; urgency=medium
 .
   * Team upload
   * Using javahelper to provide the classpath of the built jars and to list
     dependencies (Closes: #1149452)
   * Switching to debhelper-compat 14, dropping misc: substvar
 .
   [ Jérôme Charaoui ]
   * fix missing epoch in NEWS version string
Checksums-Sha1:
 9506aff00e50a5c9e1e54c8b57986cb6dc95c132 2136 logback_1.6.3-3.dsc
 64023f3270aced95c6ad8625dfe2b9eefb6ad835 11960 logback_1.6.3-3.debian.tar.xz
 cb93461904d7c120d0a556938536560c0aaea214 14030 logback_1.6.3-3_source.buildinfo
Checksums-Sha256:
 d36d538cc454e5f756ffd0843ee2bfc4ad41e754bea98ccc315a1641d743163f 2136 logback_1.6.3-3.dsc
 7d44b9ec29d488937c37d11d12d726571fa3dc6d9474ede7034f9930567a3b54 11960 logback_1.6.3-3.debian.tar.xz
 7f38918fa432dfd21393801bb96d1b2b3e50beb809b650e5eeb329309955a80a 14030 logback_1.6.3-3_source.buildinfo
Files:
 36f7b0b40d074fa76a43ffe3507b6b57 2136 java optional logback_1.6.3-3.dsc
 cab9c15bdc5c5b35686f2ee3c9f1cdf1 11960 java optional logback_1.6.3-3.debian.tar.xz
 24d825a514a22c9b730ea2cd7fdf9a42 14030 java optional logback_1.6.3-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEM8soQxPpC9J9y0UjYAMWptwndHYFAmrTZVYACgkQYAMWptwn
dHZrng/+LRi89J3ynoclc4z1DDGLHkm81KwCbfeqPOT4XUPgSi1faJds0qdMGS/O
VbfAeFMAOFKTTdZ4Yk5/R3AtyTOLg2+JQvMcAXvMo0a5Rgv6U5cGMb0NSSTxwpYx
Vk2r0JHoQTTmjx8G2vhko8H6hLK1qVeoDiLVFfRuiYiioOwVreLsThH5ZxXHZtc0
RtpL03DKSFZX8fLvWq5SOo/GcVxCVUFr/I2JA7GmHnQL5xjPYqnPuesgVxY+lu0B
OVSbGsEmHMnnL1wqDDDwTSFwl+Y04UdYGaVoU13IQOITHesnSI4/sej79s4fdsco
fN72+mBehQ0lGDeDvAcGfKnCFavjoV22ZwoYlh37TM3PLSCHTiCJs+6AMhU0Zl4e
WEcKOaNXTug/1DNF4Lh9wKiPeJTSlk+Ijg+p2ivDYBB3BrXgfJruKpvHsF4YvtAL
DU7PD/iwVgHFdp1p19hqR+y5ZB6PHfSeVsnNdkr6QdLpeRwY2yM6l4eMpDhxmUXZ
+DCVlqNluV8z9J4/yMGz22EW0CDl6QJcC/zO1eslG+ILogH6dfntki2SBprfO/2K
hLu5eJ5j0EyRtw44gKC5ToOi0s0EEktT96IUtg4US0iq5s8Saaq9jElXQKoj5Ttd
zvwRs6UPDq4H+8LvVn+2Fz1WB/kEr0QLrz0wLEIt9zgB5FCAXOg=
=eobH
-----END PGP SIGNATURE-----