[From nobody Mon Sep 14 09:37:07 2026 Received: (at submit) by bugs.debian.org; 26 Jul 2026 20:59:17 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-9.9 required=4.0 tests=BAYES_00, FOURLA, FROMDEVELOPER, NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 33; hammy, 150; neutral, 202; spammy, 0. spammytokens: hammytokens:0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*F:U*carnil, 0.000-+--H*Ad:N*Bug, 0.000-+--HTo:N*Debian Return-path: <carnil@debian.org> Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1wo5wL-004lK1-08 for submit@bugs.debian.org; Sun, 26 Jul 2026 20:59:17 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: apache-opennlp: CVE-2026-63317 Message-ID: <178509955646.133944.12858783957239267872.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0+nmu1 Date: Sun, 26 Jul 2026 22:59:16 +0200 Delivered-To: submit@bugs.debian.org U291cmNlOiBhcGFjaGUtb3Blbm5scApWZXJzaW9uOiAyLjUuOS0xClNldmVyaXR5OiBpbXBvcnRh bnQKVGFnczogc2VjdXJpdHkgdXBzdHJlYW0KWC1EZWJidWdzLUNjOiBjYXJuaWxAZGViaWFuLm9y ZywgRGViaWFuIFNlY3VyaXR5IFRlYW0gPHRlYW1Ac2VjdXJpdHkuZGViaWFuLm9yZz4KCkhpLAoK VGhlIGZvbGxvd2luZyB2dWxuZXJhYmlsaXR5IHdhcyBwdWJsaXNoZWQgZm9yIGFwYWNoZS1vcGVu bmxwLgoKQ1ZFLTIwMjYtNjMzMTdbMF06CnwgQXJiaXRyYXJ5IENsYXNzIEluc3RhbnRpYXRpb24g dmlhIFhNTCBGZWF0dXJlIEdlbmVyYXRvciBEZXNjcmlwdG9yCnwgYW5kIEZvcm1hdCBOYW1lIGlu IEFwYWNoZSBPcGVuTkxQICBWZXJzaW9ucyBBZmZlY3RlZDogICAtIGJlZm9yZQp8IDIuNS4xMCAt IGJlZm9yZSAzLjAuMC1NNSAgRGVzY3JpcHRpb246ICAgVGhyZWUgY29kZSBwYXRocyBpbiBBcGFj aGUKfCBPcGVuTkxQIGxvYWQgYSBjbGFzcyBieSBpdHMgZnVsbHktcXVhbGlmaWVkIG5hbWUgdmlh IENsYXNzLmZvck5hbWUoKQp8IGFuZCBpbnZva2UgaXRzIG5vLWFyZyBjb25zdHJ1Y3RvciB3aXRo b3V0IGFueSBwcmlvciB2YWxpZGF0aW9uIG9mCnwgdGhlIGNsYXNzIG5hbWUgb3IgaXRzIHR5cGUu wqAgIFRoZSBhZmZlY3RlZCBwYXRocyBhcmU6ICAgKDEpCnwgR2VuZXJhdG9yRmFjdG9yeSwgd2hp Y2ggcmVhZHMgdGhlIGNsYXNzIGF0dHJpYnV0ZSBvZiBnZW5lcmF0b3IKfCBlbGVtZW50cyBpbiBh biBYTUwgZmVhdHVyZSBnZW5lcmF0b3IgZGVzY3JpcHRvcjsgc3VjaCBkZXNjcmlwdG9ycwp8IGFy ZSBlbWJlZGRlZCBhcyBhcnRpZmFjdHMgaW4gbW9kZWwgYXJjaGl2ZXMgKGUuZy4gVG9rZW5OYW1l RmluZGVyCnwgYW5kIFBPU1RhZ2dlciBtb2RlbHMpIGFuZCBhcmUgcGFyc2VkIGR1cmluZyBtb2Rl bCBsb2FkaW5nLCBzbyBhbgp8IGF0dGFja2VyIHdobyBjYW4gc3VwcGx5IGEgY3JhZnRlZCBtb2Rl bCBhcmNoaXZlIGNvbnRyb2xzIHRoZSBjbGFzcwp8IG5hbWUgZGlyZWN0bHkuICAgKDIpIFN0cmVh bUZhY3RvcnlSZWdpc3RyeS5nZXRGYWN0b3J5KENsYXNzLAp8IFN0cmluZyksIHdoaWNoIGZhbGxz IGJhY2sgdG8gaW50ZXJwcmV0aW5nIGFuIHVucmVnaXN0ZXJlZCBmb3JtYXQKfCBuYW1lIGFzIHRo ZSBmdWxseS1xdWFsaWZpZWQgY2xhc3MgbmFtZSBvZiBhbiBPYmplY3RTdHJlYW1GYWN0b3J5Owp8 IHRoaXMgaXMgZXhwbG9pdGFibGUgaW4gYXBwbGljYXRpb25zIHRoYXQgcGFzcyB1bnRydXN0ZWQg Zm9ybWF0IG5hbWVzCnwgKGUuZy4gZXhwb3NpbmcgdGhlIC1mb3JtYXQgcGFyYW1ldGVyIG9mIHRo ZSBjb21tYW5kLWxpbmUgdG9vbGluZyB0bwp8IGV4dGVybmFsIGlucHV0KS4gICAoMykgU3RyaW5n SW50ZXJuZXJzLCB3aGljaCBpbnN0YW50aWF0ZXMgdGhlCnwgaW50ZXJuZXIgaW1wbGVtZW50YXRp b24gbmFtZWQgYnkgdGhlIG9wZW5ubHAuaW50ZXJuZXIuY2xhc3Mgc3lzdGVtCnwgcHJvcGVydHk7 IHRoaXMgdmFsdWUgaXMgbm9ybWFsbHkgZGVwbG95ZXItY29udHJvbGxlZCwgc28gaXQgaXMKfCBo YXJkZW5lZCBhcyBkZWZlbnNlIGluIGRlcHRoIHJhdGhlciB0aGFuIGJlaW5nIGluZGVwZW5kZW50 bHkKfCBhdHRhY2tlci1yZWFjaGFibGUuICBFeHBsb2l0YXRpb24gcmVxdWlyZXMgYSBjbGFzcyB3 aXRoIGF0dGFja2VyLQp8IHVzZWZ1bCBzaWRlIGVmZmVjdHMgaW4gaXRzIHN0YXRpYyBpbml0aWFs aXplciBvciBuby1hcmcgY29uc3RydWN0b3IKfCAoSk5ESSBsb29rdXAsIG91dGJvdW5kIG5ldHdv cmsgSS9PLCBmaWxlc3lzdGVtIGFjY2VzcykgdG8gYmUgcHJlc2VudAp8IG9uIHRoZSBjbGFzc3Bh dGgsIHNvIHRoaXMgaXMgbm90IGRyb3AtaW4gcmVtb3RlIGNvZGUgZXhlY3V0aW9uLiBUCnwgTWl0 aWdhdGlvbjogICBVcGdyYWRlIHRvIGEgZml4ZWQgcmVsZWFzZS4gICBUaGUgZml4IHJvdXRlcyBh bGwgdGhyZWUKfCBwYXRocyB0aHJvdWdoIEV4dGVuc2lvbkxvYWRlci5pbnN0YW50aWF0ZUV4dGVu c2lvbiguLi4pLCB3aGljaAp8IGNvbnN1bHRzIGEgcGFja2FnZS1wcmVmaXggYWxsb3dsaXN0IGJl Zm9yZSBDbGFzcy5mb3JOYW1lKCkgaXMKfCBpbnZva2VkLCBzbyBhIGRpc2FsbG93ZWQgY2xhc3Mg aXMgbmV2ZXIgbG9hZGVkLCBpbml0aWFsaXplZCwgb3IKfCBjb25zdHJ1Y3RlZC4gIENsYXNzZXMg dW5kZXIgdGhlIG9wZW5ubHAuIHByZWZpeCByZW1haW4gcGVybWl0dGVkIGJ5CnwgZGVmYXVsdC4g RGVwbG95bWVudHMgdGhhdCBsb2FkIG1vZGVscyByZWZlcmVuY2luZyBmZWF0dXJlIGdlbmVyYXRv cgp8IGZhY3Rvcmllcywgb2JqZWN0IHN0cmVhbSBmYWN0b3JpZXMsIG9yIHN0cmluZyBpbnRlcm5l cnMgb3V0c2lkZQp8IG9wZW5ubHAuKiBtdXN0IG9wdCB0aG9zZSBwYWNrYWdlcyBpbiwgZWl0aGVy IHByb2dyYW1tYXRpY2FsbHkgdmlhCnwgRXh0ZW5zaW9uTG9hZGVyLnJlZ2lzdGVyQWxsb3dlZFBh Y2thZ2UoU3RyaW5nKSBiZWZvcmUgdGhlIGZpcnN0CnwgbW9kZWwgbG9hZCwgb3IgYnkgc2V0dGlu ZyB0aGUgT1BFTk5MUF9FWFRfQUxMT1dFRF9QQUNLQUdFUyBzeXN0ZW0KfCBwcm9wZXJ0eSB0byBh IGNvbW1hLXNlcGFyYXRlZCBsaXN0IG9mIGFsbG93ZWQgcGFja2FnZSBwcmVmaXhlcy4KfCBVc2Vy cyB3aG8gY2Fubm90IHVwZ3JhZGUgaW1tZWRpYXRlbHkgc2hvdWxkIGVuc3VyZSBhbGwgbW9kZWwg ZmlsZXMKfCBhbmQgZm9ybWF0IG5hbWVzIGFyZSBzb3VyY2VkIGZyb20gdHJ1c3RlZCBvcmlnaW5z IGFuZCBzaG91bGQgYXVkaXQKfCB0aGVpciBjbGFzc3BhdGggZm9yIGNsYXNzZXMgd2l0aCBzaWRl LWVmZmVjdGluZyBzdGF0aWMgaW5pdGlhbGl6ZXJzCnwgb3IgY29uc3RydWN0b3JzLgoKCklmIHlv dSBmaXggdGhlIHZ1bG5lcmFiaWxpdHkgcGxlYXNlIGFsc28gbWFrZSBzdXJlIHRvIGluY2x1ZGUg dGhlCkNWRSAoQ29tbW9uIFZ1bG5lcmFiaWxpdGllcyAmIEV4cG9zdXJlcykgaWQgaW4geW91ciBj aGFuZ2Vsb2cgZW50cnkuCgpGb3IgZnVydGhlciBpbmZvcm1hdGlvbiBzZWU6CgpbMF0gaHR0cHM6 Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5vcmcvdHJhY2tlci9DVkUtMjAyNi02MzMxNwogICAg aHR0cHM6Ly93d3cuY3ZlLm9yZy9DVkVSZWNvcmQ/aWQ9Q1ZFLTIwMjYtNjMzMTcKWzFdIGh0dHBz Oi8vaXNzdWVzLmFwYWNoZS5vcmcvamlyYS9icm93c2UvT1BFTk5MUC0xODkwClsyXSBodHRwczov L2xpc3RzLmFwYWNoZS5vcmcvdGhyZWFkL215cjQ0Nm44dDNndjhncTh3YnB4bTQxb2x4MTZkOHlq CgpQbGVhc2UgYWRqdXN0IHRoZSBhZmZlY3RlZCB2ZXJzaW9ucyBpbiB0aGUgQlRTIGFzIG5lZWRl ZC4KClJlZ2FyZHMsClNhbHZhdG9yZQo= ]