Bug#1147397: zstd-jni-java: multiple CVEs and upgrading past upstream version 1.5.2-5

tony mancill tmancill at debian.org
Thu Oct 15 15:43:48 BST 2026


I had package prepared for 1.5.7-23, but was too slow and someone else
went ahead and uploaded to unstable.

I will watch for bugs.

On Mon, Oct 05, 2026 at 06:55:51AM -0700, tony mancill wrote:
> Hi Paul,
> 
> Thank you for the response, and Olek, please excuse my delay.  I
> regularly get overwhelmed by $dayjob.
> 
> I will upload zstd-jni-java to experimental, and then we can upload to
> unstable once bazel is ready healthy.
> 
> Thanks!
> tony
> 
> On Fri, Oct 02, 2026 at 03:36:24PM +0100, Ying-Chun Liu (PaulLiu) wrote:
> > Hi Olek and Tony,
> >
> > I think it is ok to just upgrade zstd-jni-java to the latest version. If
> > there's anything failed on bazel side, I'll fix it.
> > Should be not very hard.



More information about the pkg-java-maintainers mailing list