jackson-core (2.14.1-2)
[PTS] [DDPO]
OK: VCS matches the version in the archive
- Git: https://salsa.debian.org/java-team/jackson-core.git
-
- Branch: master
- Path: debian/changelog
- Repo size: 1208320
- Browser: https://salsa.debian.org/java-team/jackson-core
- Last scan: 2026-08-13 06:37:03+00
- Error: https://salsa.debian.org/api/v4/projects/java-team%2Fjackson-core API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
- Next scan: 2026-08-20 14:55:00+00
- Debian changelog in Git:
jackson-core (2.14.1-2) unstable; urgency=medium
* Team upload.
[ Markus Koschany and Emmanuel Arias ]
* CVE-2025-52999:
A limit was added to avoid a StackoverflowError if the parsed JSON is very
deeply nested. The StackoverflowError issue happens in jackson-databind but
this change in jackson-core stops it from happening unless you increase the
StreamReadConstraints.maxNestingDepth() to a high number. (Closes: #1108367).
* Declare compliance with Debian Policy 4.7.4.
-- Markus Koschany <apo@debian.org> Wed, 15 Apr 2026 13:27:34 +0200
- This branch is even with tag debian/2.14.1-2