[From nobody Wed Apr 15 22:07:05 2026 Received: (at 1108367-close) by bugs.debian.org; 15 Apr 2026 21:05:55 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.8 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_NONE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 103; hammy, 150; neutral, 155; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:41544) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wD7Qp-009HyZ-1f for 1108367-close@bugs.debian.org; Wed, 15 Apr 2026 21:05:55 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wD7Qn-005Yow-2O for 1108367-close@bugs.debian.org; Wed, 15 Apr 2026 21:05:53 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=NDfh2T/bt8cVB4Ja8z8tKFxA3ODqabs94U5x5CGRInc=; b=PVBS4R2QMY8un+snbTCWuBULS8 zwjAefXrjOHal7XtYRjD40TLxj2vppGsl64mKCIzOOWIxxQ3kDjX5px9ZlYOZ/qgRPVLGwIY6N7Pi +ug6OpVQaC1d32hpN9K1ETkZBxO8RFHSsruzWCE7qhB/pH1dLGXSdnxSzIhG3ySZPlY9oAu90lfTP WdSRXAKa0PadatustKWpoM8lFoqRqnFlPge2vSlDCQcFEyJHCQvuyAKywE83dIGeBqbNA7Ntb+eDa URCB9iU3qA/kF3KC0T7Ak442cqCLzQcWmY/EDFJjKjVC14wl0u7w1QqyFzCW8ms0+stbnV7xMk2Wg RrYmwsQA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wD7Qm-00000004szY-2Frj; Wed, 15 Apr 2026 21:05:52 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Markus Koschany <apo@debian.org> To: 1108367-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: jackson-core Debian: DAK Debian-Changes: jackson-core_2.14.1-2_source.changes Debian-Source: jackson-core Debian-Version: 2.14.1-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1108367: fixed in jackson-core 2.14.1-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6176208782425170198==" Message-Id: <E1wD7Qm-00000004szY-2Frj@fasolo.debian.org> Date: Wed, 15 Apr 2026 21:05:52 +0000 --===============6176208782425170198== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: jackson-core Source-Version: 2.14.1-2 Done: Markus Koschany <apo@debian.org> We believe that the bug you reported is fixed in the latest version of jackson-core, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1108367@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Markus Koschany <apo@debian.org> (supplier of updated jackson-core package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Apr 2026 13:27:34 +0200 Source: jackson-core Architecture: source Version: 2.14.1-2 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian= .org> Changed-By: Markus Koschany <apo@debian.org> Closes: 1108367 Changes: jackson-core (2.14.1-2) unstable; urgency=3Dmedium . * Team upload. . [ Markus Koschany and Emmanuel Arias ] * CVE-2025-52999: A limit was added to avoid a StackoverflowError if the parsed JSON is ve= ry deeply nested. The StackoverflowError issue happens in jackson-databind = but this change in jackson-core stops it from happening unless you increase = the StreamReadConstraints.maxNestingDepth() to a high number. (Closes: #1108= 367). * Declare compliance with Debian Policy 4.7.4. Checksums-Sha1: e137e5ec89028f143a7c5376671cead9e44525ba 2375 jackson-core_2.14.1-2.dsc 517a2371a79892a77d9eec98b597368b5b9a2670 738136 jackson-core_2.14.1.orig.tar= .xz 55a58c86b87389ef26542b487144ed4843be91e0 48968 jackson-core_2.14.1-2.debian.= tar.xz 04e25c090af03ccfaebbe024d019be595043f419 15811 jackson-core_2.14.1-2_amd64.b= uildinfo Checksums-Sha256: 883f858940dd56aa6e2a4683bc1ffc02cbe354a01f6f3bf6a6116f0b9b67a6fa 2375 jackso= n-core_2.14.1-2.dsc d9eb6aa1898c4d5a582c52e69da249efae25e4d2c809c57dc6b6ee01c4b0fb3b 738136 jack= son-core_2.14.1.orig.tar.xz 0c6e23f04491029793e574e543b476d7f2ee5143a1d6f852e96efa9c67364040 48968 jacks= on-core_2.14.1-2.debian.tar.xz 29b38f85a2799ca7cb6829d5cd3d214d374a4ce29b94c277d519eae6ca99c35b 15811 jacks= on-core_2.14.1-2_amd64.buildinfo Files: c0622dd9b76c815a45d3027dcac74174 2375 java optional jackson-core_2.14.1-2.dsc 38458c564bc7bed7e92d2cc2b46b1764 738136 java optional jackson-core_2.14.1.or= ig.tar.xz 9c40043876f1cc0fc9496e58a4dd9349 48968 java optional jackson-core_2.14.1-2.d= ebian.tar.xz b421239da9b9216c15561276c9a4b4c2 15811 java optional jackson-core_2.14.1-2_a= md64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmnf+OxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkKTYP+gP3IQBn3lC4eGe5TstH4Wg59alOf5ieoqTp Q1RsJ9JvZ6EFqEmTlvRCRKRN1NLYZwQc5mHFLblFVUIU1xAIXiI6PA3vD73ojJbX /6W3jMn8K+0cY1HFwgOw34ewQjDJ1Do47L6ij2GxJmTc1/rs3qQskG+ggxWZslkE cZVRABPiiwoNV7wjQM627FmpNSHP464PE+v3juHlUQYchPihtijBE6IYX5rPRm+z hyjhnHe7iqokiTKcCzHZMMcXhjmzr0tt9sSyyy/CRxMF54g36Czd+DnD8F9b76ZJ Hf/lQVRcKfWqpBx94M+juX8/SxAaSQBEm2HnAecpaU9m5nY6HSqRk3XvCdMf/Mfu URO9nC+6Cduycenjs/Vm8uRnAS5Qixw8V6E1XYA4z4bIzGYHiVjNzlN+3ROe/C/C qZSAugzqgGR/eG6Ex8c2Rjs9e/SiH+nuemXQXcsYsD0ICekeJAGmnyHp/RoeBwiG HX4ZM2fJIog+JT7rWXPTQvZmFyeFizZR23Rfoq3fiLpRpxBe+z6oVHN1MWeSGv02 D0Vag8oN/i76oaJalTsiIi9mMN1fMGT5RNTlWAaxMXq5uR6vrSi7rf5GKY2DRTst nJk9gWzqTZGsshmDawP80poAA/otNmhWPanxDWENlyxHQVQcDUR/QYKSIjjian4A EtTwIr3X =3D8z+I -----END PGP SIGNATURE----- --===============6176208782425170198== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCad/9sAAKCRCb9qggYcy5 IV81AP9o7NXkui3VH3rfikPIzGOGTL0RfUNI/JG6yr5nrZVglQEAq/OZTL1sIdOV PH+UOqyDdVZXYnycYf+RCVyo0v+jHgo= =lNCB -----END PGP SIGNATURE----- --===============6176208782425170198==-- ]