Version in base suite: 2.7.8-5 Base version: jackson-dataformat-smile_2.7.8-5 Target version: jackson-dataformat-smile_2.7.8-5+deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/j/jackson-dataformat-smile/jackson-dataformat-smile_2.7.8-5.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/j/jackson-dataformat-smile/jackson-dataformat-smile_2.7.8-5+deb13u1.dsc changelog | 7 +++++ patches/CVE-2025-52999.patch | 57 +++++++++++++++++++++++++++++++++++++++++++ patches/series | 1 3 files changed, 65 insertions(+) dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmppofn46wb/jackson-dataformat-smile_2.7.8-5.dsc: no acceptable signature found dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmppofn46wb/jackson-dataformat-smile_2.7.8-5+deb13u1.dsc: no acceptable signature found diff -Nru jackson-dataformat-smile-2.7.8/debian/changelog jackson-dataformat-smile-2.7.8/debian/changelog --- jackson-dataformat-smile-2.7.8/debian/changelog 2021-11-04 09:09:50.000000000 +0000 +++ jackson-dataformat-smile-2.7.8/debian/changelog 2026-06-10 18:37:41.000000000 +0000 @@ -1,3 +1,10 @@ +jackson-dataformat-smile (2.7.8-5+deb13u1) trixie-security; urgency=medium + + * Team upload. + * Fix FTBFS with jackson-core and restore the compatibility. + + -- Markus Koschany Wed, 10 Jun 2026 20:37:41 +0200 + jackson-dataformat-smile (2.7.8-5) unstable; urgency=medium * Team upload. diff -Nru jackson-dataformat-smile-2.7.8/debian/patches/CVE-2025-52999.patch jackson-dataformat-smile-2.7.8/debian/patches/CVE-2025-52999.patch --- jackson-dataformat-smile-2.7.8/debian/patches/CVE-2025-52999.patch 1970-01-01 00:00:00.000000000 +0000 +++ jackson-dataformat-smile-2.7.8/debian/patches/CVE-2025-52999.patch 2026-06-10 18:37:41.000000000 +0000 @@ -0,0 +1,57 @@ +From: Markus Koschany +Date: Sat, 6 Jun 2026 14:43:31 +0200 +Subject: CVE-2025-52999 + +Fix FTBFS due to changes in jackson-core caused by the patch to fix +CVE-2025-52999. + +Bug-Debian: https://bugs.debian.org/1135412 +--- + .../jackson/dataformat/smile/async/NonBlockingParserImpl.java | 2 +- + .../com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java | 6 +++--- + 2 files changed, 4 insertions(+), 4 deletions(-) + +diff --git a/src/main/java/com/fasterxml/jackson/dataformat/smile/async/NonBlockingParserImpl.java b/src/main/java/com/fasterxml/jackson/dataformat/smile/async/NonBlockingParserImpl.java +index cb5eae1..49fa165 100644 +--- a/src/main/java/com/fasterxml/jackson/dataformat/smile/async/NonBlockingParserImpl.java ++++ b/src/main/java/com/fasterxml/jackson/dataformat/smile/async/NonBlockingParserImpl.java +@@ -683,7 +683,7 @@ public class NonBlockingParserImpl + _expandSeenStringValues(); + } + +- private final void _expandSeenStringValues() ++ private final void _expandSeenStringValues() throws IOException + { + String[] oldShared = _seenStringValues; + int len = oldShared.length; +diff --git a/src/test/java/com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java b/src/test/java/com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java +index 1b8bbf5..44992ad 100644 +--- a/src/test/java/com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java ++++ b/src/test/java/com/fasterxml/jackson/dataformat/smile/TestParserNumbers.java +@@ -97,7 +97,7 @@ public class TestParserNumbers + byte[] data = _smileDoc(String.valueOf(l)); + SmileParser p = _smileParser(data); + assertToken(JsonToken.VALUE_NUMBER_INT, p.nextToken()); +- assertEquals(JsonParser.NumberType.LONG, p.getNumberType()); ++ assertEquals(JsonParser.NumberType.BIG_INTEGER, p.getNumberType()); + assertEquals(l, p.getLongValue()); + assertEquals(String.valueOf(l), p.getText()); + p.close(); +@@ -106,7 +106,7 @@ public class TestParserNumbers + data = _smileDoc(String.valueOf(l)); + p = _smileParser(data); + assertToken(JsonToken.VALUE_NUMBER_INT, p.nextToken()); +- assertEquals(JsonParser.NumberType.LONG, p.getNumberType()); ++ assertEquals(JsonParser.NumberType.BIG_INTEGER, p.getNumberType()); + assertEquals(l, p.getLongValue()); + assertEquals(String.valueOf(l), p.getText()); + p.close(); +@@ -146,7 +146,7 @@ public class TestParserNumbers + assertEquals(JsonParser.NumberType.INT, p.getNumberType()); + + assertToken(JsonToken.VALUE_NUMBER_INT, p.nextToken()); +- assertEquals(JsonParser.NumberType.LONG, p.getNumberType()); ++ assertEquals(JsonParser.NumberType.BIG_INTEGER, p.getNumberType()); + assertEquals(Long.MIN_VALUE, p.getLongValue()); + assertToken(JsonToken.VALUE_NUMBER_INT, p.nextToken()); + assertEquals(Long.MAX_VALUE, p.getLongValue()); diff -Nru jackson-dataformat-smile-2.7.8/debian/patches/series jackson-dataformat-smile-2.7.8/debian/patches/series --- jackson-dataformat-smile-2.7.8/debian/patches/series 2021-11-04 09:09:50.000000000 +0000 +++ jackson-dataformat-smile-2.7.8/debian/patches/series 2026-06-10 18:37:41.000000000 +0000 @@ -1 +1,2 @@ depend-on-junit.diff +CVE-2025-52999.patch