Bug#1150256: jameica: CAMT turnover import fails, jakarta.xml.bind.JAXB missing

Wed Oct 7 18:35:10 BST 2026

Package: jameica
Version: 2.12.0+dfsg-1
Severity: normal

Dear Maintainer,

Fetching booked transactions with Hibiscus 2.12.4 on jameica 2.12.0+dfsg-1
fails while parsing the bank's CAMT document. The FinTS dialogue itself
succeeds.

Hibiscus was installed through Jameica's plugin installer from

  https://www.willuhn.de/products/hibiscus/releases/2.12/hibiscus-2.12.4.zip

It bundles hbci4java 4.1.10 (hbci4j-core-4.1.10.jar). After the bank returns
camt.052.001.08, ParseCamt05200108 calls jakarta.xml.bind.JAXB.unmarshal and
the background task dies with:

  java.lang.NoClassDefFoundError: jakarta/xml/bind/JAXB
      at org.kapott.hbci.GV.parsers.ParseCamt05200108.parse(ParseCamt05200108.java:79)
      at org.kapott.hbci.GV.parsers.ParseCamt05200108.parse(ParseCamt05200108.java:70)
      at org.kapott.hbci.GV.GVKUmsAllCamt.extractResults(GVKUmsAllCamt.java:182)
  Caused by: java.lang.ClassNotFoundException: jakarta.xml.bind.JAXB
      at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:377)

The same failure occurred on four attempts (7 Oct 2026). Bank return codes
before the crash:

  0020  Abfrage der Kontosalden erfolgreich
  0901  PIN gültig
  0020  Abfrage CAMT Umsätze erfolgreich durchgeführt

On the first attempt the bank also returned 3040 ("Es liegen noch weitere
CAMT Umsätze vor") and 0900 ("Freigabe erfolgreich"). Hibiscus then logged
"got no new booked entries", because the parser aborted before any booking
was stored. The balance query, which does not use this parser, succeeded.

This package depends on libjaxb-api-java 2.3.1-1 and libjaxb-java
2.3.0.1-11. debian/patches/0001-Update-locations-of-Java-libraries.patch
puts /usr/share/java/jaxb-api.jar and /usr/share/java/jaxb-runtime.jar on
the classpath. Those jars provide javax.xml.bind.JAXB. Hibiscus 2.12.4's CAMT
parser needs jakarta.xml.bind.JAXB (Jakarta XML Binding 4). That class
is not in the JDK (runtime here is OpenJDK 25.0.5-ea).

Upstream jameica 2.12.0 (jameica-linux64.zip, built 2025-10-29) does ship

  lib/jakarta_ee/jakarta.xml.bind-api-4.0.2.jar
  lib/jakarta_ee/jaxb-core-4.0.5.jar
  lib/jakarta_ee/jaxb-runtime-4.0.5.jar
  lib/jakarta_ee/angus-activation-2.0.2.jar
  lib/jakarta_ee/jakarta.activation-api-2.1.3.jar
  lib/jakarta_ee/istack-commons-runtime-4.1.2.jar
  lib/jakarta_ee/txw2-4.0.5.jar

but build/build.properties define.commonlibs, and therefore the
Class-Path of jameica-linux64.jar, still lists only the JAXB 2.4 jars
under lib/java_ee/. The Debian patch follows that list and does not drop
a Jakarta entry that upstream already activates. Current Hibiscus needs
the Jakarta classes anyway.

Debian unstable has no Jakarta XML Binding 4 binary package, only the
JAXB 2.3 packages above. Adding the API to jameica's classpath needs
those libraries in the archive first (jakarta.xml.bind-api 4.0 and a
matching jaxb-runtime, plus angus-activation / istack / txw2 4.x).

Expected result: after "Abfrage CAMT Umsätze erfolgreich durchgeführt"
the returned bookings are imported.

-- System Information:
Debian Release: forky/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 7.2.9+deb14-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Java: OpenJDK 25.0.5-ea (Debian package openjdk-25-jre 25.0.5~7ea-1)

Versions of packages jameica depends on:
ii  jameica-h2database                    1.4.199-2
ii  libactivation-java                    1.2.0-2
ii  libbcpkix-java                        1.86-1
ii  libbcprov-java                        1.86-1
ii  libbcutil-java                        1.86-1
ii  libcommons-cli-java                   1.6.0-1
ii  libcommons-collections3-java          3.2.2-4
ii  libcommons-lang-java                  2.6-12
ii  libcommons-logging-java               1.3.0-2
ii  libeclipse-core-commands-java         3.11.200+eclipse4.30-1.1
ii  libeclipse-core-runtime-java          3.30.0+eclipse4.30-1
ii  libeclipse-jface-databinding-java     1.15.100+eclipse4.30-1.1
ii  libeclipse-osgi-java                  3.22.0+eclipse4.34-2
ii  libeclipse-ui-forms-java              3.13.100+eclipse4.30-1.1
ii  libequinox-common-java                3.19.200+eclipse4.34-2
ii  libgeronimo-annotation-1.3-spec-java  1.3-1
ii  libicu4j-java                         77.1-1
ii  libistack-commons-java                3.0.6-5
ii  libjameica-datasource-java            2.8.1+dfsg-5
ii  libjameica-util-java                  2.8-3
ii  libjaxb-api-java                      2.3.1-1
ii  libjaxb-java                          2.3.0.1-11
ii  libmariadb-java                       3.5.10-1
ii  libmckoisqldb-java                    1.0.6-5
ii  libnanoxml2-java                      2.2.3.dfsg-9
ii  liboro-java                           2.0.8a-15
ii  libpaperclips-java                    1.0.4-3
ii  librhino-java                         1.7.15.1-0.1
ii  libswt-cairo-gtk-4-jni                4.31.0-1
ii  libswtcalendar-java                   0.5-3
ii  libtxw2-java                          2.3.0.1-11
ii  velocity                              1.7-7

Additional relevant software, not a Debian package:
ii  hibiscus  2.12.4  (upstream zip, ~/.jameica/plugins/hibiscus)
    hbci4java 4.1.10  (hbci4j-core-4.1.10.jar)