-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Oct 2026 12:53:20 +0200 Source: zstd-jni-java Architecture: source Version: 1.5.7-23+ds-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Closes: 1048255 1147397 1148171 1148453 Changes: zstd-jni-java (1.5.7-23+ds-1) unstable; urgency=medium . * Team upload * Rewrote debian/watch in the version 5 format, using the GitHub API * New upstream release - Fixes CVE-2026-87795, CVE-2026-87823, CVE-2026-87824, CVE-2026-87825, CVE-2026-87877, CVE-2026-89045 and CVE-2026-89046 (Closes: #1147397) - Fixes CVE-2026-90852, a use after free in ZstdCompressCtx.loadDict (Closes: #1148171) - Fixes CVE-2026-90560, an out of bounds read in the ZstdDictDecompress constructor (Closes: #1148453) - Refreshed the patches - New patch to use the public zstd dictionary builder API - New build dependency on libjetbrains-annotations-java - Updated debian/libzstd-jni1.symbols - New lintian override for symbols-file-contains-debian-revision - Excluded the Gradle wrapper from the upstream tarball - Removed the exclusion of the legacy zstd sources, dropped in 1.5.7-13 * Standards-Version updated to 4.7.4 * Removed the Priority field * Versioned the dependency on libzstd-jni1 * Removed the Rules-Requires-Root field * Use ${maven:Depends} instead of ${maven:CompileDepends} * Clean the CMake build directory (Closes: #1048255) Checksums-Sha1: 08dfeeec463d226db2e3106e7d0d95dcef7285fe 2276 zstd-jni-java_1.5.7-23+ds-1.dsc 55cf826b78d834dc36d3a5620e195aee157152a7 83960 zstd-jni-java_1.5.7-23+ds.orig.tar.xz d569cbf574eed7d48e07371197c2794f9c332814 9464 zstd-jni-java_1.5.7-23+ds-1.debian.tar.xz 54cbbe76af6933f6e94cecd2309259037867fef3 19396 zstd-jni-java_1.5.7-23+ds-1_source.buildinfo Checksums-Sha256: e7e4325ef11207ad2a754fc73944b909d37077c819d03a215a022c3f01ef11b8 2276 zstd-jni-java_1.5.7-23+ds-1.dsc 09f753d456e36fa11b2bff68fb9a68e5a22227a5a2cecd1f8a5e5d05619e79ba 83960 zstd-jni-java_1.5.7-23+ds.orig.tar.xz 5adde6b87c43c7d39d9fa11975a125a4681cf667cb6a04c53d58491d558cf5c3 9464 zstd-jni-java_1.5.7-23+ds-1.debian.tar.xz df0e9e8420ae048473fcb8bf81874b8c0b960c38e46b33c154e63582b9fa9016 19396 zstd-jni-java_1.5.7-23+ds-1_source.buildinfo Files: a102e28ca9754c11fc3a3788a29a36ca 2276 java optional zstd-jni-java_1.5.7-23+ds-1.dsc ff32e2c337304acb08468e0f3d0475ba 83960 java optional zstd-jni-java_1.5.7-23+ds.orig.tar.xz ccd759546d3f38e9303a04e9bd6706c6 9464 java optional zstd-jni-java_1.5.7-23+ds-1.debian.tar.xz 7c8375149d2a4fdeee03060a68324c04 19396 java optional zstd-jni-java_1.5.7-23+ds-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmrPZEsSHGVib3VyZ0Bh cGFjaGUub3JnAAoJEPUTxBnkudCsyDcP/3IeNqjcroTdSeyJk8uq4hWDMru+tTlc hajN0AAMTUz4Ot/oZ967vqgHt+UX8As0gbY5SkCabZrBRYqNgliTRB2lYQ9turW4 MSaGa2kUmauSPRNBTfmSKOwrG9wfotCXFwdADQjGI29mN7hgE6qmkUCYNncPVqcE zWLSkToG8CTV9SS6bjJMTfb9EweTfz+ALFX4RSaKyIJWzz6MR19L6eFJ+p35CMMU hufMG07pr3+rNaELlMIqaXlhSc4OVoO7rjJcxRG0eIUt5bXTU19gihir8Feksw5P 4r1F46kd5+b0FMjHX1v0hddNEmZ8nUwOpEhqfAWyrCpz3JojBizwmqMwvKwQaFLF awFSXGmxovtO+TRWsBsOSPFJtQX0d1EW18w55wKDbEcPNjez++2OncIanNB10PsJ 0eno14750ZiGnxzrpjd+rd1cOanb94Jdm1ULVeh2iGGSLpk7/VMXsIS4X1buqzCP AqU9GGWDekmlIZQq1dPGG91OgaYB19sXHKYZnkCBOetEmgALkZV6fStPM3EUKkPm k22PE2K5DtTbF1oI3S65Hv62v/gFIN1CZNIq3PHbizOULfbQMref7PB8zOCGihX/ GoIKShBfoJKR1hhPXFA3sv+FybsrfnNeaWSEchqFkyBNjP1Ar25CLkkvqw151KES 6sFhPZv4M1n/ =Wd2c -----END PGP SIGNATURE-----
