[From nobody Thu Oct 15 14:09:14 2026 Received: (at 1148826-close) by bugs.debian.org; 15 Oct 2026 13:07:10 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 150; neutral, 254; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:56472) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xHLAs-00AnOM-2F for 1148826-close@bugs.debian.org; Thu, 15 Oct 2026 13:07:10 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xHLAr-006ba3-1E for 1148826-close@bugs.debian.org; Thu, 15 Oct 2026 13:07:09 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=BglK4uLv5SgLoAeYDWpZPNh8X3Ye0aMj/440EZjQQaA=; b=L8TOUTojaZ0Lukqvx4KEoecTlV /3eib0bMzwzAt4fSdQroDO7Yvt1jvw6VWmlGUQAlPjJ2QTenTWD2SOMq7/qOerm+eNE4U2IbJbWY6 +ZOIt+sipH1Hljx+ugetk/2J1/pcTlKEqApXtNCUKAd2QJkHRqpHMe/huV5n2FpPzbk/jBbbBqnAx xe72GmSONfcBlRcc1tYP+LjgGuGtG99RNcX8e9YR55d/SbdljFe32RQyHty0oDkSZSpwfxXN68OP7 rPp+1Wr7qzGZuhbLnw3Bs0je3bQf4uodB12/6mKOv1H7daG5ThSWmO3CIL1xp23YHqIQ3h/Nhz+MG WNQ1NVNA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xHLAq-00000002vPP-2GBw; Thu, 15 Oct 2026 13:07:08 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Emmanuel Bourg <ebourg@apache.org> To: 1148826-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: jackson-core Debian: DAK Debian-Changes: jackson-core_2.18.11-1_source.changes Debian-Source: jackson-core Debian-Version: 2.18.11-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1148826: fixed in jackson-core 2.18.11-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============0208157436165682574==" Message-Id: <E1xHLAq-00000002vPP-2GBw@fasolo.debian.org> Date: Thu, 15 Oct 2026 13:07:08 +0000 X-CrossAssassin-Score: 2 --===============0208157436165682574== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: jackson-core Source-Version: 2.18.11-1 Done: Emmanuel Bourg <ebourg@apache.org> We believe that the bug you reported is fixed in the latest version of jackson-core, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1148826@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Emmanuel Bourg <ebourg@apache.org> (supplier of updated jackson-core package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Oct 2026 11:37:01 +0200 Source: jackson-core Architecture: source Version: 2.18.11-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian= .org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Closes: 1135411 1148826 Changes: jackson-core (2.18.11-1) unstable; urgency=3Dmedium . * Team upload. * New upstream release - Fixes CVE-2026-89425: the DataInput parser now caps the length of the token quoted in error messages (Closes: #1148826) - 19-digit integers are no longer rejected as out of range of long (Closes: #1135411) - Removed the patches, no longer needed - New build dependency on libfastdoubleparser-java - New build dependency on libassertj-core-java - Depend on junit5 instead of junit4 - Updated the parent POMs installed with the package - Updated the Maven rules * Excluded the Maven wrapper from the source tarball * Enabled the test suite * Removed the Priority field * Removed the Rules-Requires-Root field * Converted debian/watch to the version 5 format Checksums-Sha1: 61590875839e59a6f674ae1bad2955a385c25c3a 2318 jackson-core_2.18.11-1.dsc 2b8940a61bc87051ef7f37a59bfbeed04b2d2c30 752152 jackson-core_2.18.11.orig.ta= r.xz 74bc3c03ea0775f41ea92b03cbfddd43fbadcef4 14620 jackson-core_2.18.11-1.debian= .tar.xz f1836d8411ed2dd72183a482d0a4762f1c290aa4 15089 jackson-core_2.18.11-1_source= .buildinfo Checksums-Sha256: 49e6e337081afd61f221da9087db28697583d18c6666fb12585e48157501cc78 2318 jackso= n-core_2.18.11-1.dsc 3f60b8afd8c0924383d408e82561c4fa0ee24df8b7566a8399396afd74f743e2 752152 jack= son-core_2.18.11.orig.tar.xz cc15f72d3737e764ee25f83b90fdbf7defb3254582040534e3ab9a71308ab5eb 14620 jacks= on-core_2.18.11-1.debian.tar.xz efde5b6a2cd4c27939262a612f13002503dc25c35648b2e4910d64fb42b61dde 15089 jacks= on-core_2.18.11-1_source.buildinfo Files: d8752ebc683984e97dee3c885744b927 2318 java optional jackson-core_2.18.11-1.d= sc 7d526d76391c142bd5a7ebf332fe5b05 752152 java optional jackson-core_2.18.11.o= rig.tar.xz 0974a7cc00a531134e2e631ff787b74d 14620 java optional jackson-core_2.18.11-1.= debian.tar.xz 9cdcc8edaf69d6c27ca5b9249e8b7c35 15089 java optional jackson-core_2.18.11-1_= source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmrQyOESHGVib3VyZ0Bh cGFjaGUub3JnAAoJEPUTxBnkudCsKooP/jQi6greUNRx95Wn0jIdBQF8it1OnpGb lHeu2LlIWLjg5YaZIQWJ4rVSdcALu/NMTkq4xV3C8S2OUEr8xjT8npLENcY25/Nd lsCkVk44YxfdOldgDzbLOfUCOVQdHyhKpRppCdVLKnv+09XsTX12l0viA5OOxNi0 klKApWrM7F5s8P5YE9un9HoKfIgqA1CM2/XdSR1CvLKdDh/0fdbSg4uXYbIt4QxW CajMbulykJpMXyw2Op4KzW99gVT3X6GL0YqTKRSlxQptJAr4X4nyLARlPMK5KrLv 8Dj/Oh+8Fiv+fxeBUUCyqFTR152Aduz26r6dajhJR2/swki99sR+Pw5YmxBXAlEf 7/AxUdc4AGfY7Hd8294zht6o6euc0aFu7cbHa1U373x1/oTDaLjyRyESM0x9f+WD yaGtFb4FYw5WdxzkDInNA1r33NZp/c050k9hJwwNt57cSg67g0oW0ITXSO6PfRhh efn8oEbkneIjhtiX/paXMn5g8vuEMIjDXeCoLqg+GacMp1b1UMYNG3XpktE5ZMc3 AkorqwFVgBkLbtHnEeUW+OyVIgJ3o5wquAex+xm7D0fOlPmzKzvvZlGxZpLOWkB0 Q0HJtwGDfd2PoW4yQj7ss1iB4XltJNIlq8TZCuqVeaAa900eKr4eRPoYjjAwXEQN 7p1xGZSQEUx8 =3DXctJ -----END PGP SIGNATURE----- --===============0208157436165682574== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCatDP/AAKCRCb9qggYcy5 ISWyAQDoG3dZlBLxNL2NtaGuIe6F52nQd1aePl7eQBSmU4E7cAD9Fhn6EOh29k99 BNq9NmarVQ7/9KTPn9bP5MBs5uqaCwI= =rVr2 -----END PGP SIGNATURE----- --===============0208157436165682574==-- ]