Your message dated Wed, 14 Oct 2026 11:34:51 +0000
with message-id <[email protected]>
and subject line Bug#1048255: fixed in zstd-jni-java 1.5.7-23+ds-1
has caused the Debian Bug report #1048255,
regarding zstd-jni-java: Fails to build source after successful build
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1048255: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1048255
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: zstd-jni-java
Version: 1.5.2-5+ds-3
Severity: minor
Tags: trixie sid ftbfs
User: [email protected]
Usertags: ftbfs-sab-20230813 ftbfs-source-after-build
User: [email protected]
Usertags: qa-doublebuild
Hi,
This package fails to build a source package after a successful build
(dpkg-buildpackage ; dpkg-buildpackage -S).
This is probably a clear violation of Debian Policy section 4.9 (clean target),
but this is filed as severity:minor for now, because a discussion on
debian-devel showed that we might want to revisit the requirement of a working
'clean' target.
More information about this class of issues, included common problems and
solutions, is available at
https://wiki.debian.org/qa.debian.org/FTBFS/SourceAfterBuild
Relevant part of the build log:
> cd /<<PKGBUILDDIR>> && runuser -u user42 -- dpkg-buildpackage --sanitize-env
> -us -uc -rfakeroot -S
> --------------------------------------------------------------------------------------------------------------------------------------
>
> dpkg-buildpackage: info: source package zstd-jni-java
> dpkg-buildpackage: info: source version 1.5.2-5+ds-3
> dpkg-buildpackage: info: source distribution unstable
> dpkg-buildpackage: info: source changed by Markus Koschany <[email protected]>
> dpkg-source --before-build .
> debian/rules clean
> dh clean --buildsystem=maven --with javahelper --with maven_repo_helper
> rm -f debian/libzstd-jni-java.debhelper.log
> debian/libzstd-jni1.debhelper.log
> debian/rules execute_before_dh_auto_clean
> make[1]: Entering directory '/<<PKGBUILDDIR>>'
> rm -f src/main/java/com/github/luben/zstd/util/ZstdVersion.java
> make[1]: Leaving directory '/<<PKGBUILDDIR>>'
> dh_auto_clean -O--buildsystem=maven
> mh_patchpoms -plibzstd-jni-java --debian-build --keep-pom-version
> --maven-repo=/<<BUILDDIR>>/zstd-jni-java-1.5.2-5\+ds/debian/maven-repo
> touch debian/stamp-poms-patched
> /usr/lib/jvm/default-java/bin/java -noverify -cp
> /usr/share/maven/boot/plexus-classworlds-2.x.jar
> -Dmaven.home=/usr/share/maven
> -Dmaven.multiModuleProjectDirectory=/<<BUILDDIR>>/zstd-jni-java-1.5.2-5\+ds
> -Dclassworlds.conf=/etc/maven/m2-debian.conf
> -Dproperties.file.manual=/<<BUILDDIR>>/zstd-jni-java-1.5.2-5\+ds/debian/maven.properties
> org.codehaus.plexus.classworlds.launcher.Launcher
> -s/etc/maven/settings-debian.xml
> -Ddebian.dir=/<<BUILDDIR>>/zstd-jni-java-1.5.2-5\+ds/debian
> -Dmaven.repo.local=/<<BUILDDIR>>/zstd-jni-java-1.5.2-5\+ds/debian/maven-repo
> --batch-mode clean
> OpenJDK 64-Bit Server VM warning: Options -Xverify:none and -noverify were
> deprecated in JDK 13 and will likely be removed in a future release.
> [0m[0m[INFO] Scanning for projects...
> [INFO]
> [INFO] ---------------------< com.github.luben:zstd-jni
> >----------------------
> [INFO] Building zstd-jni 1.5.2-5
> [INFO] --------------------------------[ jar
> ]---------------------------------
> [WARNING] The artifact org.apache.maven.plugins:maven-clean-plugin:jar:2.5
> has been relocated to org.apache.maven.plugins:maven-clean-plugin:jar:3.2.0
> [INFO]
> [INFO] --- maven-clean-plugin:3.2.0:clean (default-clean) @ zstd-jni ---
> [INFO] Deleting /<<PKGBUILDDIR>>/target
> [INFO]
> ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO]
> ------------------------------------------------------------------------
> [INFO] Total time: 0.219 s
> [INFO] Finished at: 2023-08-12T07:41:08Z
> [INFO]
> ------------------------------------------------------------------------
> [0m[0m rm -r /<<BUILDDIR>>/zstd-jni-java-1.5.2-5\+ds/debian/maven-repo
> bash -c "for dir in \$(find . -name target -type d); do if [ -f \$(echo
> \$dir | sed -e s/target\$/pom.xml/) ]; then rm -Rf \$dir; fi done"
> mh_unpatchpoms -plibzstd-jni-java
> rm -f debian/stamp-poms-patched
> mh_clean
> dh_autoreconf_clean -O--buildsystem=maven
> jh_clean -O--buildsystem=maven
> rm -fr debian/_jh_manifest* debian/_jh_build*
> rm -fr debian/.eclipse-build
> rm -f debian/orbitdeps.debhelper
> dh_clean -O--buildsystem=maven
> rm -f debian/debhelper-build-stamp
> rm -rf debian/.debhelper/
> rm -f -- debian/libzstd-jni-java.substvars
> debian/libzstd-jni1.substvars debian/files
> rm -fr -- debian/libzstd-jni-java/ debian/tmp/ debian/libzstd-jni1/
> find . \( \( \
> \( -path .\*/.git -o -path .\*/.svn -o -path .\*/.bzr -o -path
> .\*/.hg -o -path .\*/CVS -o -path .\*/.pc -o -path .\*/_darcs \) -prune -o
> -type f -a \
> \( -name '#*#' -o -name '.*~' -o -name '*~' -o -name DEADJOE \
> -o -name '*.orig' -o -name '*.rej' -o -name '*.bak' \
> -o -name '.*.orig' -o -name .*.rej -o -name '.SUMS' \
> -o -name TAGS -o \( -path '*/.deps/*' -a -name '*.P' \) \
> \) -exec rm -f {} + \) -o \
> \( -type d -a -name autom4te.cache -prune -exec rm -rf {} + \)
> \)
> dpkg-source -b .
> dpkg-source: info: using source format '3.0 (quilt)'
> dpkg-source: info: building zstd-jni-java using existing
> ./zstd-jni-java_1.5.2-5+ds.orig.tar.xz
> dpkg-source: info: using patch list from debian/patches/series
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/libzstd-jni.so:
> dpkg-source: error: new version is symlink to libzstd-jni.so.1
> dpkg-source: error: old version is nonexistent
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/libzstd-jni.so.1:
> dpkg-source: error: new version is symlink to libzstd-jni.so.1.5.2-5
> dpkg-source: error: old version is nonexistent
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/3.27.2/CMakeDetermineCompilerABI_C.bin:
> binary file contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/3.27.2/CMakeDetermineCompilerABI_C.bin in
> debian/source/include-binaries if you want to store the modified binary in
> the debian tarball
> dpkg-source: warning: executable mode 0755 of
> 'obj-x86_64-linux-gnu/CMakeFiles/3.27.2/CMakeDetermineCompilerABI_C.bin' will
> not be represented in diff
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/3.27.2/CompilerIdC/a.out: binary file
> contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/3.27.2/CompilerIdC/a.out in
> debian/source/include-binaries if you want to store the modified binary in
> the debian tarball
> dpkg-source: warning: executable mode 0755 of
> 'obj-x86_64-linux-gnu/CMakeFiles/3.27.2/CompilerIdC/a.out' will not be
> represented in diff
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_directbuffercompress_zstd.c.o:
> binary file contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_directbuffercompress_zstd.c.o
> in debian/source/include-binaries if you want to store the modified binary
> in the debian tarball
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_directbufferdecompress_zstd.c.o:
> binary file contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_directbufferdecompress_zstd.c.o
> in debian/source/include-binaries if you want to store the modified binary
> in the debian tarball
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_fast_zstd.c.o:
> binary file contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_fast_zstd.c.o
> in debian/source/include-binaries if you want to store the modified binary
> in the debian tarball
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_inputstream_zstd.c.o:
> binary file contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_inputstream_zstd.c.o
> in debian/source/include-binaries if you want to store the modified binary
> in the debian tarball
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_outputstream_zstd.c.o:
> binary file contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_outputstream_zstd.c.o
> in debian/source/include-binaries if you want to store the modified binary
> in the debian tarball
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_zdict.c.o:
> binary file contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_zdict.c.o in
> debian/source/include-binaries if you want to store the modified binary in
> the debian tarball
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_zstd.c.o:
> binary file contents changed
> dpkg-source: error: add
> obj-x86_64-linux-gnu/CMakeFiles/zstd-jni.dir/src/main/native/jni_zstd.c.o in
> debian/source/include-binaries if you want to store the modified binary in
> the debian tarball
> dpkg-source: warning: file
> zstd-jni-java-1.5.2-5+ds/obj-x86_64-linux-gnu/install_manifest.txt has no
> final newline (either original or modified version)
> dpkg-source: error: cannot represent change to
> obj-x86_64-linux-gnu/libzstd-jni.so.1.5.2-5: binary file contents changed
> dpkg-source: error: add obj-x86_64-linux-gnu/libzstd-jni.so.1.5.2-5 in
> debian/source/include-binaries if you want to store the modified binary in
> the debian tarball
> dpkg-source: warning: executable mode 0755 of
> 'obj-x86_64-linux-gnu/libzstd-jni.so.1.5.2-5' will not be represented in diff
> dpkg-source: error: unrepresentable changes to source
> dpkg-buildpackage: error: dpkg-source -b . subprocess returned exit status 1
>
> E: Command 'cd /<<PKGBUILDDIR>> && runuser -u user42 -- dpkg-buildpackage
> --sanitize-env -us -uc -rfakeroot -S' failed to run.
The full build log is available from:
http://qa-logs.debian.net/2023/08/13/zstd-jni-java_1.5.2-5+ds-3_unstable.log
If you reassign this bug to another package, please mark it as 'affects'-ing
this package. See https://www.debian.org/Bugs/server-control#affects
If you fail to reproduce this, please provide a build log and diff it with mine
so that we can identify if something relevant changed in the meantime.
--- End Message ---
--- Begin Message ---
Source: zstd-jni-java
Source-Version: 1.5.7-23+ds-1
Done: Emmanuel Bourg <[email protected]>
We believe that the bug you reported is fixed in the latest version of
zstd-jni-java, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Emmanuel Bourg <[email protected]> (supplier of updated zstd-jni-java package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 14 Oct 2026 12:53:20 +0200
Source: zstd-jni-java
Architecture: source
Version: 1.5.7-23+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: Emmanuel Bourg <[email protected]>
Closes: 1048255 1147397 1148171 1148453
Changes:
zstd-jni-java (1.5.7-23+ds-1) unstable; urgency=medium
.
* Team upload
* Rewrote debian/watch in the version 5 format, using the GitHub API
* New upstream release
- Fixes CVE-2026-87795, CVE-2026-87823, CVE-2026-87824, CVE-2026-87825,
CVE-2026-87877, CVE-2026-89045 and CVE-2026-89046 (Closes: #1147397)
- Fixes CVE-2026-90852, a use after free in ZstdCompressCtx.loadDict
(Closes: #1148171)
- Fixes CVE-2026-90560, an out of bounds read in the ZstdDictDecompress
constructor (Closes: #1148453)
- Refreshed the patches
- New patch to use the public zstd dictionary builder API
- New build dependency on libjetbrains-annotations-java
- Updated debian/libzstd-jni1.symbols
- New lintian override for symbols-file-contains-debian-revision
- Excluded the Gradle wrapper from the upstream tarball
- Removed the exclusion of the legacy zstd sources, dropped in 1.5.7-13
* Standards-Version updated to 4.7.4
* Removed the Priority field
* Versioned the dependency on libzstd-jni1
* Removed the Rules-Requires-Root field
* Use ${maven:Depends} instead of ${maven:CompileDepends}
* Clean the CMake build directory (Closes: #1048255)
Checksums-Sha1:
08dfeeec463d226db2e3106e7d0d95dcef7285fe 2276 zstd-jni-java_1.5.7-23+ds-1.dsc
55cf826b78d834dc36d3a5620e195aee157152a7 83960
zstd-jni-java_1.5.7-23+ds.orig.tar.xz
d569cbf574eed7d48e07371197c2794f9c332814 9464
zstd-jni-java_1.5.7-23+ds-1.debian.tar.xz
54cbbe76af6933f6e94cecd2309259037867fef3 19396
zstd-jni-java_1.5.7-23+ds-1_source.buildinfo
Checksums-Sha256:
e7e4325ef11207ad2a754fc73944b909d37077c819d03a215a022c3f01ef11b8 2276
zstd-jni-java_1.5.7-23+ds-1.dsc
09f753d456e36fa11b2bff68fb9a68e5a22227a5a2cecd1f8a5e5d05619e79ba 83960
zstd-jni-java_1.5.7-23+ds.orig.tar.xz
5adde6b87c43c7d39d9fa11975a125a4681cf667cb6a04c53d58491d558cf5c3 9464
zstd-jni-java_1.5.7-23+ds-1.debian.tar.xz
df0e9e8420ae048473fcb8bf81874b8c0b960c38e46b33c154e63582b9fa9016 19396
zstd-jni-java_1.5.7-23+ds-1_source.buildinfo
Files:
a102e28ca9754c11fc3a3788a29a36ca 2276 java optional
zstd-jni-java_1.5.7-23+ds-1.dsc
ff32e2c337304acb08468e0f3d0475ba 83960 java optional
zstd-jni-java_1.5.7-23+ds.orig.tar.xz
ccd759546d3f38e9303a04e9bd6706c6 9464 java optional
zstd-jni-java_1.5.7-23+ds-1.debian.tar.xz
7c8375149d2a4fdeee03060a68324c04 19396 java optional
zstd-jni-java_1.5.7-23+ds-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Wd2c
-----END PGP SIGNATURE-----
pgpkwxgH2ZfCs.pgp
Description: PGP signature
--- End Message ---
