libjackson-json-java (1.9.2-8+deb9u1) stretch-security; urgency=medium

  * Non-maintainer upload by the LTS team.
  * Backported security fixes including:
    - Jackson Deserializer security vulnerability. (CVE-2017-7525)
    - Block more JDK types from polymorphic deserialization. (CVE 2017-15095)
    - XXE vulnerability in XmlMapper. (CVE-2019-10172)

 -- Adrian Bunk <bunk@debian.org>  Mon, 24 Aug 2020 11:22:38 +0300

libjackson-json-java (1.9.2-8) unstable; urgency=medium

  * Team upload.
  * Depend on libasm-java (>= 5.0) instead of libasm4-java
  * Standards-Version updated to 3.9.8
  * Use secure Vcs-* URLs

 -- Emmanuel Bourg <ebourg@apache.org>  Sun, 02 Oct 2016 23:20:26 +0200

libjackson-json-java (1.9.2-7) unstable; urgency=medium

  * Team upload.
  * Transition to bnd 2.1.0.
  * Build-Depend on libnet-luminis-build-plugin-java and do not use the
    embedded copy anymore.

 -- Markus Koschany <apo@debian.org>  Fri, 20 Nov 2015 01:55:57 +0100

libjackson-json-java (1.9.2-6) unstable; urgency=medium

  * Team upload.
  * Avoid source only uploads for now. Due to a bug in maven-repo-helper the
    build will fail on the buildd.

 -- Markus Koschany <apo@debian.org>  Sun, 15 Nov 2015 22:43:02 +0100

libjackson-json-java (1.9.2-5) unstable; urgency=medium

  * Team upload.
  * Vcs-Browser: Switch to cgit and use https.
  * Switch to bnd1.50 because libjackson-json-java FTBFS with bnd >= 2.1.
  * Remove watch file because codehaus.org is offline.

 -- Markus Koschany <apo@debian.org>  Fri, 13 Nov 2015 23:48:50 +0100

libjackson-json-java (1.9.2-4) unstable; urgency=medium

  * Team upload.
  * Transition to libasm4-java (Closes: #800854)
  * Standards-Version updated to 3.9.6 (no changes)

 -- Emmanuel Bourg <ebourg@apache.org>  Tue, 27 Oct 2015 20:27:40 +0100

libjackson-json-java (1.9.2-3) unstable; urgency=medium

  * Team upload.
  * New libjackson-json-java-doc.maintscript: Use symlink_to_dir function to
    convert the former documentation symlink to a real directory. This function
    is available for the first time since dpkg 1.17.5 thus add Pre-Depends:
    dpkg (>= 1.17.5) to libjackson-json-java-doc binary package.
    (Closes: #736295)
  * Fix broken VCS-browser field.

 -- Markus Koschany <apo@gambaru.de>  Wed, 22 Jan 2014 19:13:04 +0100

libjackson-json-java (1.9.2-2) unstable; urgency=low

  * Team upload.
  * Drop libjackson-json-java.links.
    Do not create symlinks for jackson-core.jar and jackson-mapper.jar and
    thus make the libjackson2-core-java package co-installable.
    (Closes: #722665)
  * debian/control:
    - Bump compat level to 9 and require debhelper >= 9.
    - Update Standards-Version to 3.9.5, no changes.
    - Use canonical VCS-URI.
    - libjackson-json-java-doc: Do not depend on libjackson-json-java anymore
      to fix lintian warning doc-package-depends-on-main-package.
    - libjackson-json-java: Suggest the -doc package.
  * debian/rules:
    - Remove dh_installdocs override.
  * Drop README.Debian since we do not symlink to jackson-core.jar and
    jackson-mapper.jar anymore. Please use the real jar files provided by this
    package.
  * Change license for all files under the debian directory from BSD to
    Apache-2.0.
    Fix lintian warning copyright-refers-to-deprecated-bsd-license-file.
  * Run wrap-and-sort -sa.

 -- Markus Koschany <apo@gambaru.de>  Sun, 01 Dec 2013 21:22:27 +0100

libjackson-json-java (1.9.2-1) unstable; urgency=low

  * New upstream release.
  * Added watch file.
  * Generate poms as part of build and switch to
    using maven-repo-helper to install jars and pom file.
  * Bumped Standards-Version to 3.9.2; no changes.
  * Added myself to uploaders.

 -- James Page <james.page@ubuntu.com>  Fri, 16 Dec 2011 16:53:55 +0000

libjackson-json-java (1.5.3+dfsg1-1) unstable; urgency=low

  * Initial release. (Closes: #565743)

 -- Thomas Koch <thomas.koch@ymc.ch>  Fri, 04 Jun 2010 08:32:58 +0200
