[From nobody Thu Jun 11 22:05:09 2026 Received: (at 1135410-close) by bugs.debian.org; 11 Jun 2026 21:02:50 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 97; hammy, 150; neutral, 217; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:43132) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmY6-001Sv6-09 for 1135410-close@bugs.debian.org; Thu, 11 Jun 2026 21:02:50 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmY5-00EE2T-2Y for 1135410-close@bugs.debian.org; Thu, 11 Jun 2026 21:02:49 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=mqywSrQthLUaPG59Z3yHTUqPxcclDvl4iG8xU1SKyGA=; b=S4rq7bjh6une9p4GrI/z92Jtmg DPLeoJDIHzLZOzbS7sKfAci922fnn4wRXnWsqI+5PL6QsyyVzQoD49w8uy1ezcMTa8tujhOXeremT 1CJ9uJPWYc+olv5kcFxq5cTogujXNxfbeKdqNr2lmTujAvf0ZixKv2R20iVDKdsiZyBgGXSIpjdch DPQOihJR5UyZwYHa6qwls6lSklg1zoarD2MpAYRh9IOaNl4olce1iKwnIp/WH4cWB6zvEag1KF+/a OtUk/7RL1i98/uoMKF0HTKBj3RBEf5t4W5m9Pj6mw+x3cP6P03fx422wmTkXsKimVKOWT7R+YiWlq +pxyAEmQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wXmY4-0000000EWyY-49K7; Thu, 11 Jun 2026 21:02:48 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Markus Koschany <apo@debian.org> To: 1135410-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: jackson-databind Debian: DAK Debian-Changes: jackson-databind_2.14.0+ds-1+deb13u1_source.changes Debian-Source: jackson-databind Debian-Version: 2.14.0+ds-1+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1135410: fixed in jackson-databind 2.14.0+ds-1+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5808728471029968754==" Message-Id: <E1wXmY4-0000000EWyY-49K7@fasolo.debian.org> Date: Thu, 11 Jun 2026 21:02:48 +0000 --===============5808728471029968754== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: jackson-databind Source-Version: 2.14.0+ds-1+deb13u1 Done: Markus Koschany <apo@debian.org> We believe that the bug you reported is fixed in the latest version of jackson-databind, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1135410@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Markus Koschany <apo@debian.org> (supplier of updated jackson-databind packag= e) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Jun 2026 21:40:22 CEST Source: jackson-databind Architecture: source Version: 2.14.0+ds-1+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian= .org> Changed-By: Markus Koschany <apo@debian.org> Checksums-Sha1: de517f0f74a9aba96a78c615d1a0d588a9edb593 2601 jackson-databind_2.14.0+ds-1+d= eb13u1.dsc f433c59dd815901b22a004d474f92ff5157d66cc 1058028 jackson-databind_2.14.0+ds.= orig.tar.xz 583f3760d8c17c3fd7eabf254996c71a64b4473b 8628 jackson-databind_2.14.0+ds-1+d= eb13u1.debian.tar.xz 4029b6c72a3f6f6ebc9fc1f3c3b7f9f491510ab5 18427 jackson-databind_2.14.0+ds-1+= deb13u1_amd64.buildinfo Checksums-Sha256: a65b28dda5366052ec210588d992d816333b4e2eadfeffa906044d0c96217df8 2601 jackso= n-databind_2.14.0+ds-1+deb13u1.dsc 311a2bcc6cca5ac74b7f27b5209d41cc023ab6e0d214dc0818ea5fad490ebf8c 1058028 jac= kson-databind_2.14.0+ds.orig.tar.xz 4d9deb97dbb0cbd1e14cf2afb04c9d97acad9c42d9b7d8285cc3e0d2b597d706 8628 jackso= n-databind_2.14.0+ds-1+deb13u1.debian.tar.xz 4f4289887898e94d2fd49f57be2521f9e4c732ed99d0b1d4a592a914b07a20bf 18427 jacks= on-databind_2.14.0+ds-1+deb13u1_amd64.buildinfo Closes: 1135410 Changes: jackson-databind (2.14.0+ds-1+deb13u1) trixie-security; urgency=3Dmedium . [ Otto Kek=C3=A4l=C3=A4inen ] * Enable Salsa CI to help avoid testable regressions before upload to Debi= an * Fix broken Homepage link and add current upstream metadata. The site wiki.fasterxml.com no longer exists. Replace it with link to the current wiki location. Also add a metadata file following DEP-12, so it is easier for both maintainers to find the correct upstream websites, as well as f= or `git-buildpackage --add-upstreamvcs` feature to work. * Define Debian packaging repository conventions in gbp.conf. Add a git-buildpackage config file to show explicitly what conventions t= his Debian source package repository uses. This way it is easier for current maintainer to do e.g. new upstream version imports, as there are less arguments that need to be passed to `gbp` commands, and also for any fut= ure maintainer/contributor there is less guesswork. . [ Markus Koschany ] * Add CVE-2025-52999.patch and fix a FBTFS due to changes in jackson-core. (Closes: #1135410) Files: 333e39c6575251821b0cea94e214a7a3 2601 java optional jackson-databind_2.14.0+= ds-1+deb13u1.dsc 23f198b8a35f2bbff250f5eca4b03e15 1058028 java optional jackson-databind_2.14= .0+ds.orig.tar.xz ca8aa18a2087b3f456b7347ab3696866 8628 java optional jackson-databind_2.14.0+= ds-1+deb13u1.debian.tar.xz 83c8f8f2ed57cc7af1c5e19353cf81c3 18427 java optional jackson-databind_2.14.0= +ds-1+deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmopvatfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkdrcQALH4fpRl+7VbTqXtLkguXMIgNkDBHxtklwxO 7gJehEcOo5+wWJM0tdHBquZk2JYpeKA+wO3dlBBXozrbuyeMtSu+dy6khEkcQHPJ 62D5ENApP1+PV2SfDk08nZdx56+ruSsdU6n89nKeeDPYeJipx3Z2Tt0SuV+YERkF ZmnJtJpQ/PdL69L7iUjG2pn0xjhPSQSFetnFoxct+1qHYV9Dcw3gmFhu/iBGn0Mh lpf2F598CNiiaqZ+wON0rokFkLZqqzkA2Sa3iEmeoFABamlHk7ql6wMGx9tSypue +F8Q7g7gnO9XkY5wPG7eAWlFyb+fuwZUWiCXE9C+dvHDNRgWMxi76CSGcCuVtEUa T6QmvrOtRPKmpHuUVSz+99wI9vAziG6+T3Z38/Ytd/X3xbhZHXFfoUegGAK5NqB/ yWFcDqeGM6kHgGn/dEeHGg/ve0AsatBUis3PGwJ1OJIs2hsAS0DU4mhQWP2pPV7L BPdJKuECbTFspGhgvf23SXHGST75TpYYHc+d/KJU/JxK0yJKjKZsFgKwfNfz2kkw PO6wLwGcYVFeOl/w0aM+gAqRNgv7GTv6OjmYXg+0ZgTqVdcdNkKhXA+1KaiRtRdk 5dU2CV3f2mxMjjJJHfBU7VagMEIICLqUoDObMi2QXzPSAvCmLhvjyp2S12WoRjp8 DlvWUnMA =3D7X0O -----END PGP SIGNATURE----- --===============5808728471029968754== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaisieAAKCRCb9qggYcy5 IV1EAQCcnUbO1nB1CbzelNvN42CjDmqNVxrsTNem0LydJ6RNyAD/RGTtXVlj9veZ iFp9lvXFfKHVAfdDfqb0/Rsw6ZogIQc= =7c0u -----END PGP SIGNATURE----- --===============5808728471029968754==-- ]