[Git][java-team/unirest-java][master] 2 commits: Patch for jackson-core 2.14.1-2 (Closes: #1139493)

[Tony Mancill (@tmancill)]

Tony Mancill pushed to branch master at Debian Java Maintainers / unirest-java


Commits:
d496f9d1 by tony mancill at 2026-06-20T14:05:13-07:00
Patch for jackson-core 2.14.1-2 (Closes: #1139493)

- - - - -
c305cae1 by tony mancill at 2026-06-20T14:05:30-07:00
Prepare changelog for upload

- - - - -


3 changed files:

- debian/changelog
- + debian/patches/0002-jackson-ioexeception-ftbfs.patch
- debian/patches/series


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,9 @@
+unirest-java (1.4.8-4) unstable; urgency=medium
+
+  * Patch for jackson-core 2.14.1-2 (Closes: #1139493)
+
+ -- tony mancill <tmancill at debian.org>  Sat, 20 Jun 2026 14:05:17 -0700
+
 unirest-java (1.4.8-3) unstable; urgency=medium
 
   * Team upload.


=====================================
debian/patches/0002-jackson-ioexeception-ftbfs.patch
=====================================
@@ -0,0 +1,42 @@
+Description: Address FTBFS now that ObjectMapper throws IOException
+ The upload for jackson-core 2.14.1-2 changed the possible exceptions thrown
+ See https://security-tracker.debian.org/tracker/CVE-2025-52999 and
+ https://tracker.debian.org/news/1742191/accepted-jackson-core-2141-2-source-into-unstable/
+ .
+ This also builds against the libjackson2-core-java 2.14.1-1, so does not
+ require a versioned dependency and is suitable for backports.
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1139493
+Author: tony mancill <tmancill at debian.org>
+Forwarded: not-needed
+
+--- a/src/test/java/com/mashape/unirest/test/helper/JacksonObjectMapper.java
++++ b/src/test/java/com/mashape/unirest/test/helper/JacksonObjectMapper.java
+@@ -1,7 +1,7 @@
+ package com.mashape.unirest.test.helper;
+ 
+-import com.fasterxml.jackson.core.JsonProcessingException;
+ import com.mashape.unirest.http.ObjectMapper;
++import java.io.IOException;
+ 
+ import java.io.IOException;
+ 
+@@ -20,7 +20,7 @@
+ 	public String writeValue(Object value) {
+ 		try {
+ 			return jacksonObjectMapper.writeValueAsString(value);
+-		} catch (JsonProcessingException e) {
++		} catch (IOException e) {
+ 			throw new RuntimeException(e);
+ 		}
+ 	}
+--- a/README.md
++++ b/README.md
+@@ -141,7 +141,7 @@
+     public String writeValue(Object value) {
+         try {
+             return jacksonObjectMapper.writeValueAsString(value);
+-        } catch (JsonProcessingException e) {
++        } catch (IOException e) {
+             throw new RuntimeException(e);
+         }
+     }


=====================================
debian/patches/series
=====================================
@@ -1,2 +1,3 @@
 json_lib.patch
 disable_external_web_tests.patch
+0002-jackson-ioexeception-ftbfs.patch



View it on GitLab: https://salsa.debian.org/java-team/unirest-java/-/compare/6fcdcf22365eed2baff631427a6764c6fa1bc944...c305cae19963f755892610d6ab34968a24bd7a3e

-- 
View it on GitLab: https://salsa.debian.org/java-team/unirest-java/-/compare/6fcdcf22365eed2baff631427a6764c6fa1bc944...c305cae19963f755892610d6ab34968a24bd7a3e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-commits/attachments/20260620/65aa3652/attachment.htm>