jackson-core_2.18.11-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 15 Oct 2026 11:37:01 +0200
Source: jackson-core
Architecture: source
Version: 2.18.11-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebourg at apache.org>
Closes: 1135411 1148826
Changes:
 jackson-core (2.18.11-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
     - Fixes CVE-2026-89425: the DataInput parser now caps the length of
       the token quoted in error messages (Closes: #1148826)
     - 19-digit integers are no longer rejected as out of range of long
       (Closes: #1135411)
     - Removed the patches, no longer needed
     - New build dependency on libfastdoubleparser-java
     - New build dependency on libassertj-core-java
     - Depend on junit5 instead of junit4
     - Updated the parent POMs installed with the package
     - Updated the Maven rules
   * Excluded the Maven wrapper from the source tarball
   * Enabled the test suite
   * Removed the Priority field
   * Removed the Rules-Requires-Root field
   * Converted debian/watch to the version 5 format
Checksums-Sha1:
 61590875839e59a6f674ae1bad2955a385c25c3a 2318 jackson-core_2.18.11-1.dsc
 2b8940a61bc87051ef7f37a59bfbeed04b2d2c30 752152 jackson-core_2.18.11.orig.tar.xz
 74bc3c03ea0775f41ea92b03cbfddd43fbadcef4 14620 jackson-core_2.18.11-1.debian.tar.xz
 f1836d8411ed2dd72183a482d0a4762f1c290aa4 15089 jackson-core_2.18.11-1_source.buildinfo
Checksums-Sha256:
 49e6e337081afd61f221da9087db28697583d18c6666fb12585e48157501cc78 2318 jackson-core_2.18.11-1.dsc
 3f60b8afd8c0924383d408e82561c4fa0ee24df8b7566a8399396afd74f743e2 752152 jackson-core_2.18.11.orig.tar.xz
 cc15f72d3737e764ee25f83b90fdbf7defb3254582040534e3ab9a71308ab5eb 14620 jackson-core_2.18.11-1.debian.tar.xz
 efde5b6a2cd4c27939262a612f13002503dc25c35648b2e4910d64fb42b61dde 15089 jackson-core_2.18.11-1_source.buildinfo
Files:
 d8752ebc683984e97dee3c885744b927 2318 java optional jackson-core_2.18.11-1.dsc
 7d526d76391c142bd5a7ebf332fe5b05 752152 java optional jackson-core_2.18.11.orig.tar.xz
 0974a7cc00a531134e2e631ff787b74d 14620 java optional jackson-core_2.18.11-1.debian.tar.xz
 9cdcc8edaf69d6c27ca5b9249e8b7c35 15089 java optional jackson-core_2.18.11-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=XctJ
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20261015/cac41c43/attachment.sig>