Your message dated Sat, 06 Jun 2026 14:48:47 +0000
with message-id <[email protected]>
and subject line Bug#1135410: fixed in jackson-databind 2.14.0+ds-2
has caused the Debian Bug report #1135410,
regarding jackson-databind: FTBFS: unreported exception java.io.IOException;
must be caught or declared to be thrown
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1135410: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1135410
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:jackson-databind
Version: 2.14.0+ds-1
Severity: serious
Tags: ftbfs forky sid
Dear maintainer:
During a rebuild of all packages in unstable, this package failed to build.
Below you will find the last part of the build log (probably the most
relevant part, but not necessarily). If required, the full build log
is available here:
https://people.debian.org/~sanvila/build-logs/202605/
About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.
If you cannot reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.
If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:jackson-databind, so that this is still
visible in the BTS web page for this package.
Thanks.
--------------------------------------------------------------------------------
[...]
debian/rules clean
dh clean --with javahelper
dh_auto_clean
bash -c "for dir in \$(find . -name target -type d); do if [ -f \$(echo
\$dir | sed -e s/target\$/pom.xml/) ]; then rm -Rf \$dir; fi done"
mh_unpatchpoms -plibjackson2-databind-java
jh_clean
Duplicate specification "unlink|u" for option "u"
dh_clean
debian/rules binary
dh binary --with javahelper
dh_update_autotools_config
dh_autoreconf
dh_auto_configure
mh_patchpoms -plibjackson2-databind-java --debian-build
--keep-pom-version
--maven-repo=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds/debian/maven-repo
jh_linkjars
dh_auto_build
/usr/lib/jvm/default-java/bin/java -noverify -cp
/usr/share/maven/boot/plexus-classworlds-2.x.jar -Dmaven.home=/usr/share/maven
-Dmaven.multiModuleProjectDirectory=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds
-Dclassworlds.conf=/etc/maven/m2-debian.conf
-Dproperties.file.manual=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds/debian/maven.properties
org.codehaus.plexus.classworlds.launcher.Launcher
-s/etc/maven/settings-debian.xml
-Ddebian.dir=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds/debian
-Dmaven.repo.local=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds/debian/maven-repo
--batch-mode package -DskipTests -Dnotimestamp=true -Dlocale=en_US
OpenJDK 64-Bit Server VM warning: Options -Xverify:none and -noverify were
deprecated in JDK 13 and will likely be removed in a future release.
WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::objectFieldOffset has been called by
com.google.common.util.concurrent.AbstractFuture$UnsafeAtomicHelper
(file:/usr/share/maven/lib/guava.jar)
WARNING: Please consider reporting this to the maintainers of class
com.google.common.util.concurrent.AbstractFuture$UnsafeAtomicHelper
WARNING: sun.misc.Unsafe::objectFieldOffset will be removed in a future release
[INFO] Scanning for projects...
[INFO] Looking for compatible RELEASE version of plugin
org.apache.felix:maven-bundle-plugin
[WARNING]
[WARNING] Some problems were encountered while building the effective model for
com.fasterxml.jackson.core:jackson-databind:bundle:2.14.0
[WARNING] 'build.plugins.plugin.version' for
org.apache.maven.plugins:maven-compiler-plugin is missing. @
com.fasterxml:oss-parent:debian,
/<<PKGBUILDDIR>>/debian/maven-repo/com/fasterxml/oss-parent/debian/oss-parent-debian.pom,
line 173, column 12
[WARNING] 'build.plugins.plugin.version' for
org.apache.maven.plugins:maven-jar-plugin is missing. @
com.fasterxml:oss-parent:debian,
/<<PKGBUILDDIR>>/debian/maven-repo/com/fasterxml/oss-parent/debian/oss-parent-debian.pom,
line 226, column 12
[WARNING] 'build.plugins.plugin.version' for
org.apache.felix:maven-bundle-plugin is missing. @
com.fasterxml:oss-parent:debian,
/<<PKGBUILDDIR>>/debian/maven-repo/com/fasterxml/oss-parent/debian/oss-parent-debian.pom,
line 221, column 12
[WARNING]
[WARNING] It is highly recommended to fix these problems because they threaten
the stability of your build.
[WARNING]
[WARNING] For this reason, future Maven versions might no longer support
building such malformed projects.
[WARNING]
[INFO]
[INFO] ------------< com.fasterxml.jackson.core:jackson-databind >-------------
[INFO] Building jackson-databind 2.14.0
[INFO] from pom.xml
[INFO] -------------------------------[ bundle ]-------------------------------
[INFO] Looking for compatible RELEASE version of plugin
org.apache.maven.plugins:maven-compiler-plugin
[INFO] Looking for compatible RELEASE version of plugin
org.apache.maven.plugins:maven-jar-plugin
[INFO] Looking for compatible RELEASE version of plugin
org.apache.maven.plugins:maven-resources-plugin
[INFO] Looking for compatible RELEASE version of plugin
org.apache.maven.plugins:maven-install-plugin
[INFO] Looking for compatible RELEASE version of plugin
org.apache.maven.plugins:maven-deploy-plugin
[INFO] Looking for compatible RELEASE version of plugin
org.apache.maven.plugins:maven-shade-plugin
[INFO]
[INFO] --- replacer:1.5.3:replace (process-packageVersion) @ jackson-databind
---
[INFO] Replacement run on 1 file.
[INFO]
[INFO] --- build-helper:3.3.0:add-source (add-generated-sources) @
jackson-databind ---
[INFO] Source directory: /<<PKGBUILDDIR>>/target/generated-sources added.
[INFO]
[INFO] --- build-helper:3.3.0:add-resource (add-resource) @ jackson-databind ---
[INFO]
[INFO] --- resources:3.3.1:resources (default-resources) @ jackson-databind ---
[INFO] Copying 2 resources from src/main/resources to target/classes
[INFO] Copying 1 resource from . to target/classes/META-INF
[INFO]
[INFO] --- compiler:3.13.0:compile (default-compile) @ jackson-databind ---
[WARNING] Parameter 'optimize' (user property 'maven.compiler.optimize') is
deprecated: This property is a no-op in javac.
[INFO] Recompiling the module because of changed source code.
[INFO] Compiling 465 source files with javac [debug:lines,source,vars optimize
deprecation target 1.8] to target/classes
[INFO]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/node/ObjectNode.java:
Some input files use unchecked or unsafe operations.
[INFO]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/node/ObjectNode.java:
Recompile with -Xlint:unchecked for details.
[INFO] -------------------------------------------------------------
[WARNING] COMPILATION WARNING :
[INFO] -------------------------------------------------------------
[WARNING] bootstrap class path is not set in conjunction with -source 8
not setting the bootstrap class path may lead to class files that cannot run
on JDK 8
--release 8 is recommended instead of -source 8 -target 1.8 because it sets
the bootstrap class path automatically
[WARNING] source value 8 is obsolete and will be removed in a future release
[WARNING] target value 8 is obsolete and will be removed in a future release
[WARNING] To suppress warnings about obsolete options, use -Xlint:-options.
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/ObjectMapper.java:[6,21]
java.security.AccessController in java.security has been deprecated and marked
for removal
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/cfg/MapperBuilder.java:[3,21]
java.security.AccessController in java.security has been deprecated and marked
for removal
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/introspect/AnnotatedMethod.java:[284,19]
isAccessible() in java.lang.reflect.AccessibleObject has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/introspect/AnnotatedField.java:[170,19]
isAccessible() in java.lang.reflect.AccessibleObject has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/introspect/AnnotatedConstructor.java:[213,22]
isAccessible() in java.lang.reflect.AccessibleObject has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/util/internal/PrivateMaxEntriesMap.java:[343,45]
getId() in java.lang.Thread has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/util/internal/PrivateMaxEntriesMap.java:[421,55]
getId() in java.lang.Thread has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/ObjectMapper.java:[1138,15]
java.lang.SecurityManager in java.lang has been deprecated and marked for
removal
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/ObjectMapper.java:[1138,42]
getSecurityManager() in java.lang.System has been deprecated and marked for
removal
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/ObjectMapper.java:[1143,16]
java.security.AccessController in java.security has been deprecated and marked
for removal
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/cfg/MapperBuilder.java:[395,15]
java.lang.SecurityManager in java.lang has been deprecated and marked for
removal
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/cfg/MapperBuilder.java:[395,42]
getSecurityManager() in java.lang.System has been deprecated and marked for
removal
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/cfg/MapperBuilder.java:[400,16]
java.security.AccessController in java.security has been deprecated and marked
for removal
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/deser/std/FromStringDeserializer.java:[318,24]
URL(java.lang.String) in java.net.URL has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/deser/std/FromStringDeserializer.java:[418,24]
Locale(java.lang.String) in java.util.Locale has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/deser/std/FromStringDeserializer.java:[424,24]
Locale(java.lang.String,java.lang.String) in java.util.Locale has been
deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/deser/std/FromStringDeserializer.java:[430,24]
Locale(java.lang.String,java.lang.String,java.lang.String) in java.util.Locale
has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/deser/std/FromStringDeserializer.java:[475,24]
Locale(java.lang.String,java.lang.String,java.lang.String) in java.util.Locale
has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/util/ClassUtil.java:[1000,20]
isAccessible() in java.lang.reflect.AccessibleObject has been deprecated
[WARNING]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/deser/std/StdKeyDeserializer.java:[226,24]
URL(java.lang.String) in java.net.URL has been deprecated
[INFO] 24 warnings
[INFO] -------------------------------------------------------------
[INFO] -------------------------------------------------------------
[ERROR] COMPILATION ERROR :
[INFO] -------------------------------------------------------------
[ERROR]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/ObjectMapper.java:[3875,30]
unreported exception java.io.IOException; must be caught or declared to be
thrown
[INFO] 1 error
[INFO] -------------------------------------------------------------
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 4.346 s
[INFO] Finished at: 2026-05-01T21:11:35Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal
org.apache.maven.plugins:maven-compiler-plugin:3.13.0:compile (default-compile)
on project jackson-databind: Compilation failure
[ERROR]
/<<PKGBUILDDIR>>/src/main/java/com/fasterxml/jackson/databind/ObjectMapper.java:[3875,30]
unreported exception java.io.IOException; must be caught or declared to be
thrown
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
dh_auto_build: error: /usr/lib/jvm/default-java/bin/java -noverify -cp
/usr/share/maven/boot/plexus-classworlds-2.x.jar -Dmaven.home=/usr/share/maven
-Dmaven.multiModuleProjectDirectory=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds
-Dclassworlds.conf=/etc/maven/m2-debian.conf
-Dproperties.file.manual=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds/debian/maven.properties
org.codehaus.plexus.classworlds.launcher.Launcher
-s/etc/maven/settings-debian.xml
-Ddebian.dir=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds/debian
-Dmaven.repo.local=/<<BUILDDIR>>/jackson-databind-2.14.0\+ds/debian/maven-repo
--batch-mode package -DskipTests -Dnotimestamp=true -Dlocale=en_US returned
exit code 1
make: *** [debian/rules:8: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess failed with exit
status 2
--------------------------------------------------------------------------------
--- End Message ---
--- Begin Message ---
Source: jackson-databind
Source-Version: 2.14.0+ds-2
Done: Markus Koschany <[email protected]>
We believe that the bug you reported is fixed in the latest version of
jackson-databind, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Markus Koschany <[email protected]> (supplier of updated jackson-databind package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 06 Jun 2026 14:07:23 +0200
Source: jackson-databind
Architecture: source
Version: 2.14.0+ds-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: Markus Koschany <[email protected]>
Closes: 1135410
Changes:
jackson-databind (2.14.0+ds-2) unstable; urgency=medium
.
[ Otto Kekäläinen ]
* Enable Salsa CI to help avoid testable regressions before upload to Debian
* Fix broken Homepage link and add current upstream metadata. The site
wiki.fasterxml.com no longer exists. Replace it with link to the current
wiki location. Also add a metadata file following DEP-12, so it is easier
for both maintainers to find the correct upstream websites, as well as for
`git-buildpackage --add-upstreamvcs` feature to work.
* Define Debian packaging repository conventions in gbp.conf.
Add a git-buildpackage config file to show explicitly what conventions this
Debian source package repository uses. This way it is easier for current
maintainer to do e.g. new upstream version imports, as there are less
arguments that need to be passed to `gbp` commands, and also for any future
maintainer/contributor there is less guesswork.
.
[ Markus Koschany ]
* Add CVE-2025-52999.patch and fix a FBTFS due to changes in jackson-core.
(Closes: #1135410)
Checksums-Sha1:
369f80f5be3181b8119c1c878eeb053a45123771 2568 jackson-databind_2.14.0+ds-2.dsc
656847a34ba43cf30e877078aa3686385ee32ff9 8596
jackson-databind_2.14.0+ds-2.debian.tar.xz
eb6834ae96e094854fd2ffb6c40aba212a90b6f6 18685
jackson-databind_2.14.0+ds-2_amd64.buildinfo
Checksums-Sha256:
6db5da9deb80a2ceb7d3561428a28ed177a72d26aa496e5276129035201cd91f 2568
jackson-databind_2.14.0+ds-2.dsc
d11968bc783374f996eb53485e4a668892f34860124757e8afad58b8e0523899 8596
jackson-databind_2.14.0+ds-2.debian.tar.xz
2b50e1e77dcf7998360f29d4520be6fea78b844dd66122c6c2566287b87fba80 18685
jackson-databind_2.14.0+ds-2_amd64.buildinfo
Files:
a44bc849c72d29d4abf327bb3dcb2c9d 2568 java optional
jackson-databind_2.14.0+ds-2.dsc
d9a2c4f9d4284c47fe2a0aacbf7ec270 8596 java optional
jackson-databind_2.14.0+ds-2.debian.tar.xz
5fe3f79c1f1d4f2d7d8c14eae6fb3140 18685 java optional
jackson-databind_2.14.0+ds-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=QUE/
-----END PGP SIGNATURE-----
pgpyOiqP8_T6c.pgp
Description: PGP signature
--- End Message ---
__
This is the maintainer address of Debian's Java team
<https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
[email protected] for discussions and questions.
