Change log for libjackson-json-java package in Ubuntu

libjackson-json-java (1.9.2-7ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Improper input sanitization
    - debian/patches/CVE-2017-15095.patch: Fix deserialization.
    - debian/patches/CVE-2017-7525.patch: Backport all known security
      fixes from 2.x that were missing, related to public CVEs.
    - debian/patches/CVE-2019-10172_1.patch: Set Secure Processing
      flag on DocumentBuilderFactory.
    - d/p/CVE-2019-10172_2.patch: setExpandEntityReferences(false).
    - CVE-2017-7525
    - CVE-2017-15095
    - CVE-2019-10172

 -- Paulo Flabiano Smorigo <email address hidden>  Thu, 18 Feb 2021 14:04:33 +0000

Available diffs

• diff from 1.9.2-7 (in Debian) to 1.9.2-7ubuntu0.2 (4.6 KiB)

libjackson-json-java (1.9.13-2) unstable; urgency=medium

  * Team upload.
  * Add upstream fixes.
    - Serializing types for deeply nested Maps.
    - Set Secure Processing flag on DocumentBuilderFactory.
    - Set setExpandEntityReferences(false). (Fixes: CVE-2019-10172)
    - WriteRawValue surrogate pair fix.
    - Fix deserialization.
    - All known security fixes. (Fixes: CVE-2017-15095 and CVE-2017-7525)
  * Update Standards-Version to 4.5.0
  * Use debhelper-compat.
    - Update compat level to 13.

 -- Sudip Mukherjee <email address hidden>  Sat, 19 Sep 2020 20:20:21 +0100

Available diffs

• diff from 1.9.13-1 to 1.9.13-2 (7.1 KiB)

libjackson-json-java (1.9.13-1~18.04) bionic; urgency=medium

  * Backport for OpenJDK 11. LP: #1814133.

Available diffs

• diff from 1.9.2-9 (in Debian) to 1.9.13-1~18.04 (173.1 KiB)

libjackson-json-java (1.9.13-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Updated the path to the artifacts installed by mh_install
  * Depend on libjaxrs-api-java instead of libjsr311-api-java
  * Standards-Version updated to 4.3.0
  * Use salsa.debian.org Vcs-* URLs
  * Added the watch file
  * Converted debian/copyright to the Copyright Format 1.0

 -- Emmanuel Bourg <email address hidden>  Sun, 30 Dec 2018 23:28:06 +0100

Available diffs

• diff from 1.9.2-10 to 1.9.13-1 (172.5 KiB)

libjackson-json-java (1.9.2-10) unstable; urgency=medium

  * Team upload.
  * Declare compliance with Debian Policy 4.2.1.
  * Update Homepage URI. (Closes: #907296)
  * Fix FTBFS with OpenJDK 11 by build-depending on libactivation-java and
    libjaxb-java. (Closes: #912541)

 -- Markus Koschany <email address hidden>  Sat, 03 Nov 2018 14:11:19 +0100

Available diffs

• diff from 1.9.2-9 to 1.9.2-10 (1.3 KiB)

libjackson-json-java (1.9.2-9) unstable; urgency=medium

  * Team upload.
  * Switch to compat level 11.
  * Declare compliance with Debian Policy 4.1.3.
  * Fix FTBFS with Java 9. (Closes: #893239)
  * Drop libjackson-json-java-doc.maintscript.

 -- Markus Koschany <email address hidden>  Fri, 30 Mar 2018 18:25:02 +0200

Available diffs

• diff from 1.9.2-8 to 1.9.2-9 (1.3 KiB)

libjackson-json-java (1.9.2-8) unstable; urgency=medium

  * Team upload.
  * Depend on libasm-java (>= 5.0) instead of libasm4-java
  * Standards-Version updated to 3.9.8
  * Use secure Vcs-* URLs

 -- Emmanuel Bourg <email address hidden>  Sun, 02 Oct 2016 23:20:26 +0200

Available diffs

• diff from 1.9.2-7 to 1.9.2-8 (1.2 KiB)

libjackson-json-java (1.9.2-7) unstable; urgency=medium

  * Team upload.
  * Transition to bnd 2.1.0.
  * Build-Depend on libnet-luminis-build-plugin-java and do not use the
    embedded copy anymore.

 -- Markus Koschany <email address hidden>  Fri, 20 Nov 2015 01:55:57 +0100

Available diffs

• diff from 1.9.2-6 to 1.9.2-7 (4.7 KiB)

libjackson-json-java (1.9.2-6) unstable; urgency=medium

  * Team upload.
  * Avoid source only uploads for now. Due to a bug in maven-repo-helper the
    build will fail on the buildd.

 -- Markus Koschany <email address hidden>  Sun, 15 Nov 2015 22:43:02 +0100

Available diffs

• diff from 1.9.2-5 to 1.9.2-6 (355 bytes)

libjackson-json-java (1.9.2-5) unstable; urgency=medium

  * Team upload.
  * Vcs-Browser: Switch to cgit and use https.
  * Switch to bnd1.50 because libjackson-json-java FTBFS with bnd >= 2.1.
  * Remove watch file because codehaus.org is offline.

 -- Markus Koschany <email address hidden>  Fri, 13 Nov 2015 23:48:50 +0100

Available diffs

• diff from 1.9.2-4 to 1.9.2-5 (1.1 KiB)

libjackson-json-java (1.9.2-4) unstable; urgency=medium

  * Team upload.
  * Transition to libasm4-java (Closes: #800854)
  * Standards-Version updated to 3.9.6 (no changes)

 -- Emmanuel Bourg <email address hidden>  Tue, 27 Oct 2015 20:27:40 +0100

Available diffs

• diff from 1.9.2-3 to 1.9.2-4 (827 bytes)

libjackson-json-java (1.9.2-3) unstable; urgency=medium


  * Team upload.
  * New libjackson-json-java-doc.maintscript: Use symlink_to_dir function to
    convert the former documentation symlink to a real directory. This function
    is available for the first time since dpkg 1.17.5 thus add Pre-Depends:
    dpkg (>= 1.17.5) to libjackson-json-java-doc binary package.
    (Closes: #736295)
  * Fix broken VCS-browser field.

 -- Markus Koschany <email address hidden>  Wed, 22 Jan 2014 19:13:04 +0100

Available diffs

• diff from 1.9.2-2 to 1.9.2-3 (835 bytes)

libjackson-json-java (1.9.2-2) unstable; urgency=low


  * Team upload.
  * Drop libjackson-json-java.links.
    Do not create symlinks for jackson-core.jar and jackson-mapper.jar and
    thus make the libjackson2-core-java package co-installable.
    (Closes: #722665)
  * debian/control:
    - Bump compat level to 9 and require debhelper >= 9.
    - Update Standards-Version to 3.9.5, no changes.
    - Use canonical VCS-URI.
    - libjackson-json-java-doc: Do not depend on libjackson-json-java anymore
      to fix lintian warning doc-package-depends-on-main-package.
    - libjackson-json-java: Suggest the -doc package.
  * debian/rules:
    - Remove dh_installdocs override.
  * Drop README.Debian since we do not symlink to jackson-core.jar and
    jackson-mapper.jar anymore. Please use the real jar files provided by this
    package.
  * Change license for all files under the debian directory from BSD to
    Apache-2.0.
    Fix lintian warning copyright-refers-to-deprecated-bsd-license-file.
  * Run wrap-and-sort -sa.

 -- Markus Koschany <email address hidden>  Sun, 01 Dec 2013 21:22:27 +0100

Available diffs

• diff from 1.9.2-1 (in Ubuntu) to 1.9.2-2 (2.3 KiB)

libjackson-json-java (1.9.2-1) unstable; urgency=low

  * New upstream release.
  * Added watch file.
  * Generate poms as part of build and switch to 
    using maven-repo-helper to install jars and pom file.
  * Bumped Standards-Version to 3.9.2; no changes.
  * Added myself to uploaders.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  04 Jan 2012 12:25:30 +0000

Available diffs

• diff from 1.5.3+dfsg1-1 to 1.9.2-1 (819.7 KiB)

libjackson-json-java (1.5.3+dfsg1-1) unstable; urgency=low

  * Initial release. (Closes: #565743)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  15 Jun 2010 11:01:12 +0100