Bug#1147397: zstd-jni-java: multiple CVEs and upgrading past upstream version 1.5.2-5
tony mancill
tmancill at debian.org
Thu Oct 15 15:43:48 BST 2026
I had package prepared for 1.5.7-23, but was too slow and someone else
went ahead and uploaded to unstable.
I will watch for bugs.
On Mon, Oct 05, 2026 at 06:55:51AM -0700, tony mancill wrote:
> Hi Paul,
>
> Thank you for the response, and Olek, please excuse my delay. I
> regularly get overwhelmed by $dayjob.
>
> I will upload zstd-jni-java to experimental, and then we can upload to
> unstable once bazel is ready healthy.
>
> Thanks!
> tony
>
> On Fri, Oct 02, 2026 at 03:36:24PM +0100, Ying-Chun Liu (PaulLiu) wrote:
> > Hi Olek and Tony,
> >
> > I think it is ok to just upgrade zstd-jni-java to the latest version. If
> > there's anything failed on bazel side, I'll fix it.
> > Should be not very hard.
More information about the pkg-java-maintainers
mailing list