-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 29 Oct 2026 01:34:28 +0100 Source: jline3 Architecture: source Version: 3.29.0+ds-2 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Juan Manuel Méndez Rey <juan.mendezr@proton.me> Closes: 1059726 1143458 Changes: jline3 (3.29.0+ds-2) unstable; urgency=medium . * Add myself to Uploaders. * d/copyright: name the 2026 packaging work in Files: debian/*. * Run the upstream test suite: drop maven.test.skip, build-depend on junit5 and libeasymock-java, map their artifacts in d/maven.rules, and stop stripping easymock in d/maven.ignoreRules. * Point the test JVM at the JNI library we build, so the tests that load it run against the one we ship. * Skip FfmTest and JansiTerminalProviderTest#testIsSystemStream, which need a pty and the native library of jansi. * CVE-2026-56740: Cap NEW-ENVIRON variables at 100, including across subnegotiations (Closes: #1143458). * CVE-2026-56741: Reset NAWS sizes above 500 columns or rows to the default. * CVE-2023-50572: Already fixed upstream in 3.25.0, and the groovy module is not built (Closes: #1059726). Checksums-Sha1: 6e8b21eb886a866f19ffbde5875dffdd2734e237 2400 jline3_3.29.0+ds-2.dsc 06dd15e9565a0722ec87082395052d0f1a6fcd8d 13972 jline3_3.29.0+ds-2.debian.tar.xz 1ba71e7e62140e1e9ec2980b42c7704d4a374d25 11711 jline3_3.29.0+ds-2_source.buildinfo Checksums-Sha256: 925d78353e68df739df8cbd7970b2ecf0abe5aaf2e442c066b77e0a87c52c6a1 2400 jline3_3.29.0+ds-2.dsc 8c4d1816c7c18b6077654f951c1930e8eac063139d3074f7b7c30e14d32b8531 13972 jline3_3.29.0+ds-2.debian.tar.xz d42489b6590ac51792fe8b4f6457b4244d64689e63e62b42934a24f6f4d3d6c9 11711 jline3_3.29.0+ds-2_source.buildinfo Files: b26967eeb93076887c57102ed398ff78 2400 java optional jline3_3.29.0+ds-2.dsc 9769f13daa2cc3b0ceb05d179715d234 13972 java optional jline3_3.29.0+ds-2.debian.tar.xz 8b3557bb495e33c0a21e69b6b4de0df1 11711 java optional jline3_3.29.0+ds-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXHq+og+GMEWcyMi14n8s+EWML6QFAmrpJRUACgkQ4n8s+EWM L6RMmQ/+P7fVY7sSjY/xDj12yViaknI1BYpcD1lCbpcnd7HN/2A7PevDEUGs/UHr FI5RVnRZeOijrw0L/rAEOK5suafCRAFiMLQZD8Cex5ohYH9Wo3DikfF9OGRjP70G CteNJKNbJjTjTRq7pc9eatjN/iFzkByC93q7x77kYVeNSkg0iys2+XgKIVC/5uJc FSc4wxePZBU92MLKqmgXCxHTrQjo1khPUblof7AQeommzdNfQppI0vfzDzs1cPD7 MKRGt7EMxrAqFYwgUhM9DsGnUbkE/Jf3Qltfcoth9XvWoYbw37y6WVi65/PqGVsw hwb4JFQHK4lIGmEcUlsOoRlk14bAsO+b6tqzsbzae28wVpEPIt1BRH1pBglFthlF L4w9tTcfhm7pWyQyplTVFw20TkOcWsuJRxOU0aQsAi5SYGtlGYh0OOUQkmrHVaL+ R8w5OCFtuC6fWNqnEye4EYueo+LSAZ0fIbkUnGPkHkd6EULOJ4yU+x6CvQbkdyXo lW9RaVYC4JrduXJSpQ0uqH/pJKXAumFOIjttMkfypuSjjJ72B5D2dkkjz0mTiJf7 r+AqSVxuVXt1d5XJYNrBFJGfkP0nBtDUiSEy9ZXb8SdDlwy0wB4FALt4TFH1HNm7 zkNaogWtNmz2umLlFtVxK6rKrzv+drU0DkGqjVbgB/3pJiVOjAw= =9Qd4 -----END PGP SIGNATURE-----
