libjettison-java - Debian Package Tracker

general

source: libjettison-java (main)
version: 1.5.4-1
maintainer: Debian Java Maintainers (archive) (DMD)
uploaders: Torsten Werner [DMD]
arch: all
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.5.3-1~deb11u1
o-o-sec: 1.5.3-1~deb11u1
oldstable: 1.5.3-1
stable: 1.5.4-1
testing: 1.5.4-1
unstable: 1.5.4-1

versioned links

1.5.3-1~deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.5.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.5.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libjettison-java

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2023-5072: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

Created: 2023-10-13 Last update: 2025-08-10 06:32

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2023-5072: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

Created: 2025-08-09 Last update: 2025-08-10 06:32

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

libjettison-java could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2025-09-06 04:30

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 22b8000d7bd3aa49e6f68621be7ae942b8ee7536
Merge: 339efba 06db0af
Author: Alexandre Detiste <alexandre.detiste@gmail.com>
Date:   Thu Sep 4 18:25:19 2025 +0200

    Merge branch 'multiarch-fixes' into 'master'
    
    Apply multi-arch hints
    
    See merge request java-team/libjettison-java!2

commit 06db0afd7f40d68bb0a57efabd2c5f3cc1f7ec5b
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Tue Jun 20 18:34:01 2023 +0000

    Apply multi-arch hints.
    + libjettison-java: Add Multi-Arch: foreign.
    
    Changes-By: apply-multiarch-hints

Created: 2025-09-04 Last update: 2025-09-04 17:30

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2023-5072: (postponed; to be fixed through a stable update) Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-08-09 Last update: 2025-08-10 06:32

2 low-priority security issues in bookworm low

There are 2 open security issues in bookworm.

2 issues left for the package maintainer to handle:

CVE-2023-1436: (needs triaging) An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
CVE-2023-5072: (postponed; to be fixed through a stable update) Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-06-10 Last update: 2025-08-10 06:32

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 4.6.2).

Created: 2024-04-07 Last update: 2025-02-27 13:24

news

[rss feed]

[2023-06-17] libjettison-java 1.5.4-1 MIGRATED to testing (Debian testing watch)
[2023-06-11] Accepted libjettison-java 1.5.4-1 (source) into unstable (tony mancill)
[2023-01-16] Accepted libjettison-java 1.5.3-1~deb11u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Markus Koschany)
[2023-01-10] Accepted libjettison-java 1.5.3-1~deb11u1 (source) into stable-security (Debian FTP Masters) (signed by: Markus Koschany)
[2023-01-02] libjettison-java 1.5.3-1 MIGRATED to testing (Debian testing watch)
[2022-12-31] Accepted libjettison-java 1.5.3-1~deb10u1 (source) into oldstable (Markus Koschany)
[2022-12-31] Accepted libjettison-java 1.5.3-1 (source) into unstable (Markus Koschany)
[2022-11-15] libjettison-java 1.5.1-1 MIGRATED to testing (Debian testing watch)
[2022-11-10] Accepted libjettison-java 1.5.1-1 (source) into unstable (Markus Koschany)
[2022-11-10] Accepted libjettison-java 1.4.0-1+deb10u1 (source) into oldstable (Markus Koschany)
[2021-01-23] libjettison-java 1.4.1-1 MIGRATED to testing (Debian testing watch)
[2021-01-17] Accepted libjettison-java 1.4.1-1 (source) into unstable (Emmanuel Bourg)
[2018-04-26] libjettison-java 1.4.0-1 MIGRATED to testing (Debian testing watch)
[2018-04-20] Accepted libjettison-java 1.4.0-1 (source) into unstable (Emmanuel Bourg)
[2011-04-09] libjettison-java 1.2-3 MIGRATED to testing (Debian testing watch)
[2011-03-29] Accepted libjettison-java 1.2-3 (source all) (Damien Raude-Morvan)
[2010-06-21] libjettison-java 1.2-2 MIGRATED to testing (Debian testing watch)
[2010-06-10] Accepted libjettison-java 1.2-2 (source all) (Torsten Werner)
[2010-05-19] libjettison-java 1.2-1 MIGRATED to testing (Debian testing watch)
[2010-05-08] Accepted libjettison-java 1.2-1 (source all) (Torsten Werner)
[2009-05-30] libjettison-java 1.1-1 MIGRATED to testing (Debian testing watch)
[2009-05-19] Accepted libjettison-java 1.1-1 (source all) (Torsten Werner)
[2008-03-19] libjettison-java 1.0-1 MIGRATED to testing (Debian testing watch)
[2008-03-08] Accepted libjettison-java 1.0-1 (source all) (Torsten Werner)
[2007-12-14] libjettison-java 1.0~RC2-1 MIGRATED to testing (Debian testing watch)
[2007-12-03] Accepted libjettison-java 1.0~RC2-1 (source all) (Torsten Werner)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.5.4-1