Debian Patches

Status for jline3/3.29.0+ds-2

Patch Description Author Forwarded Bugs Origin Last update
remove-werror.patch Remove -Werror from the compiler arguments Debian builds against its own versions of dependencies (Apache MINA sshd,
jansi, jna) which differ from the upstream-pinned versions and emit
deprecation warnings. With -Werror these warnings break the build. Drop
-Werror; the warnings are not actionable in the Debian context.

diff --git a/builtins/pom.xml b/builtins/pom.xml
index b0e7a58..b5d3979 100644		 Juan Manuel Méndez Rey <juan.mendezr@proton.me> not-needed 2026-06-09
CVE-2026-56740.patch CVE-2026-56740: cap telnet NEW-ENVIRON variables at 100
diff --git a/remote-telnet/src/main/java/org/jline/builtins/telnet/TelnetIO.java b/remote-telnet/src/main/java/org/jline/builtins/telnet/TelnetIO.java
index f75b650..2f2f02c 100644		 Guillaume Nodet <gnodet@gmail.com> yes debian upstream upstream, https://github.com/jline/jline3/commit/4ee3a73849ffb9a85ec748e4e8cd8f6d81f84f40 2026-11-03
CVE-2026-56740-66662bd0.patch Enforce the NEW-ENVIRON variable limit across subnegotiations Follow-up to CVE-2026-56740: the per-frame limit could be bypassed by
sending many frames. Also adds the upstream regression test.

diff --git a/remote-telnet/src/main/java/org/jline/builtins/telnet/TelnetIO.java b/remote-telnet/src/main/java/org/jline/builtins/telnet/TelnetIO.java
index 2f2f02c..d73f379 100644		 Guillaume Nodet <gnodet@gmail.com> yes debian upstream upstream, https://github.com/jline/jline3/commit/66662bd07b9f8a30540e69bc31cd850b757111bc 2026-10-29
CVE-2026-56741.patch CVE-2026-56741: reset telnet NAWS sizes above 500 to the default
diff --git a/remote-telnet/src/main/java/org/jline/builtins/telnet/TelnetIO.java b/remote-telnet/src/main/java/org/jline/builtins/telnet/TelnetIO.java
index d73f379..f978f96 100644		 Guillaume Nodet <gnodet@gmail.com> yes upstream upstream, https://github.com/jline/jline3/commit/4ee3a73849ffb9a85ec748e4e8cd8f6d81f84f40 2026-11-03

All known versions for source package 'jline3'

Links