[Git][java-team/jackson-dataformat-smile][master] 2 commits: Fix FTBFS

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Java Maintainers / jackson-dataformat-smile


Commits:
27967636 by Markus Koschany at 2026-06-06T15:13:58+02:00
Fix FTBFS

Closes: #1135412

- - - - -
9b62700e by Markus Koschany at 2026-06-06T15:26:28+02:00
Update changelog

- - - - -


3 changed files:

- debian/changelog
- + debian/patches/CVE-2025-52999.patch
- debian/patches/series


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,11 @@
+jackson-dataformat-smile (2.7.8-6) unstable; urgency=medium
+
+  * Team upload.
+  * Fix FTBFS due to changes in jackson-core to fix CVE-2025-52999.
+    (Closes: #1135412)
+
+ -- Markus Koschany <apo at debian.org>  Sat, 06 Jun 2026 15:14:17 +0200
+
 jackson-dataformat-smile (2.7.8-5) unstable; urgency=medium
 
   * Team upload.


=====================================
debian/patches/CVE-2025-52999.patch
=====================================
@@ -0,0 +1,57 @@
+From: Markus Koschany <apo at debian.org>
+Date: Sat, 6 Jun 2026 14:43:31 +0200
+Subject: CVE-2025-52999
+
+Fix FTBFS due to changes in jackson-core caused by the patch to fix
+CVE-2025-52999.
+
+Bug-Debian: https://bugs.debian.org/1135412
+---
+ .../jackson/dataformat/smile/async/NonBlockingParserImpl.java       | 2 +-
+ .../com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java   | 6 +++---
+ 2 files changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/src/main/java/com/fasterxml/jackson/dataformat/smile/async/NonBlockingParserImpl.java b/src/main/java/com/fasterxml/jackson/dataformat/smile/async/NonBlockingParserImpl.java
+index cb5eae1..49fa165 100644
+--- a/src/main/java/com/fasterxml/jackson/dataformat/smile/async/NonBlockingParserImpl.java
++++ b/src/main/java/com/fasterxml/jackson/dataformat/smile/async/NonBlockingParserImpl.java
+@@ -683,7 +683,7 @@ public class NonBlockingParserImpl
+         _expandSeenStringValues();
+     }
+     
+-    private final void _expandSeenStringValues()
++    private final void _expandSeenStringValues() throws IOException
+     {
+         String[] oldShared = _seenStringValues;
+         int len = oldShared.length;
+diff --git a/src/test/java/com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java b/src/test/java/com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java
+index 1b8bbf5..44992ad 100644
+--- a/src/test/java/com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java
++++ b/src/test/java/com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java
+@@ -97,7 +97,7 @@ public class TestParserNumbers
+     	byte[] data = _smileDoc(String.valueOf(l));
+     	SmileParser p = _smileParser(data);
+     	assertToken(JsonToken.VALUE_NUMBER_INT, p.nextToken());
+-    	assertEquals(JsonParser.NumberType.LONG, p.getNumberType());
++    	assertEquals(JsonParser.NumberType.BIG_INTEGER, p.getNumberType());
+     	assertEquals(l, p.getLongValue());
+     	assertEquals(String.valueOf(l), p.getText());
+     	p.close();
+@@ -106,7 +106,7 @@ public class TestParserNumbers
+     	data = _smileDoc(String.valueOf(l));
+     	p = _smileParser(data);
+     	assertToken(JsonToken.VALUE_NUMBER_INT, p.nextToken());
+-    	assertEquals(JsonParser.NumberType.LONG, p.getNumberType());
++    	assertEquals(JsonParser.NumberType.BIG_INTEGER, p.getNumberType());
+     	assertEquals(l, p.getLongValue());
+     	assertEquals(String.valueOf(l), p.getText());
+      p.close();
+@@ -146,7 +146,7 @@ public class TestParserNumbers
+     	assertEquals(JsonParser.NumberType.INT, p.getNumberType());
+ 
+     	assertToken(JsonToken.VALUE_NUMBER_INT, p.nextToken());
+-    	assertEquals(JsonParser.NumberType.LONG, p.getNumberType());
++    	assertEquals(JsonParser.NumberType.BIG_INTEGER, p.getNumberType());
+     	assertEquals(Long.MIN_VALUE, p.getLongValue());
+     	assertToken(JsonToken.VALUE_NUMBER_INT, p.nextToken());
+     	assertEquals(Long.MAX_VALUE, p.getLongValue());


=====================================
debian/patches/series
=====================================
@@ -1 +1,2 @@
 depend-on-junit.diff
+CVE-2025-52999.patch



View it on GitLab: https://salsa.debian.org/java-team/jackson-dataformat-smile/-/compare/c2b5f1d04720116d326ccd529c1e90d879942dc1...9b62700e94a95bc87fe8e172de1c3aa47a360a34

-- 
View it on GitLab: https://salsa.debian.org/java-team/jackson-dataformat-smile/-/compare/c2b5f1d04720116d326ccd529c1e90d879942dc1...9b62700e94a95bc87fe8e172de1c3aa47a360a34
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-commits/attachments/20260606/8ad5fbd5/attachment.htm>