-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 10 Jun 2026 21:40:22 CEST
Source: jackson-databind
Architecture: source
Version: 2.14.0+ds-1+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
 de517f0f74a9aba96a78c615d1a0d588a9edb593 2601 jackson-databind_2.14.0+ds-1+deb13u1.dsc
 f433c59dd815901b22a004d474f92ff5157d66cc 1058028 jackson-databind_2.14.0+ds.orig.tar.xz
 583f3760d8c17c3fd7eabf254996c71a64b4473b 8628 jackson-databind_2.14.0+ds-1+deb13u1.debian.tar.xz
 4029b6c72a3f6f6ebc9fc1f3c3b7f9f491510ab5 18427 jackson-databind_2.14.0+ds-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 a65b28dda5366052ec210588d992d816333b4e2eadfeffa906044d0c96217df8 2601 jackson-databind_2.14.0+ds-1+deb13u1.dsc
 311a2bcc6cca5ac74b7f27b5209d41cc023ab6e0d214dc0818ea5fad490ebf8c 1058028 jackson-databind_2.14.0+ds.orig.tar.xz
 4d9deb97dbb0cbd1e14cf2afb04c9d97acad9c42d9b7d8285cc3e0d2b597d706 8628 jackson-databind_2.14.0+ds-1+deb13u1.debian.tar.xz
 4f4289887898e94d2fd49f57be2521f9e4c732ed99d0b1d4a592a914b07a20bf 18427 jackson-databind_2.14.0+ds-1+deb13u1_amd64.buildinfo
Closes: 1135410
Changes:
 jackson-databind (2.14.0+ds-1+deb13u1) trixie-security; urgency=medium
 .
   [ Otto Kekäläinen ]
   * Enable Salsa CI to help avoid testable regressions before upload to Debian
   * Fix broken Homepage link and add current upstream metadata.  The site
     wiki.fasterxml.com no longer exists. Replace it with link to the current
     wiki location. Also add a metadata file following DEP-12, so it is easier
     for both maintainers to find the correct upstream websites, as well as for
     `git-buildpackage --add-upstreamvcs` feature to work.
   * Define Debian packaging repository conventions in gbp.conf.
     Add a git-buildpackage config file to show explicitly what conventions this
     Debian source package repository uses. This way it is easier for current
     maintainer to do e.g. new upstream version imports, as there are less
     arguments that need to be passed to `gbp` commands, and also for any future
     maintainer/contributor there is less guesswork.
 .
   [ Markus Koschany ]
   * Add CVE-2025-52999.patch and fix a FBTFS due to changes in jackson-core.
     (Closes: #1135410)
Files:
 333e39c6575251821b0cea94e214a7a3 2601 java optional jackson-databind_2.14.0+ds-1+deb13u1.dsc
 23f198b8a35f2bbff250f5eca4b03e15 1058028 java optional jackson-databind_2.14.0+ds.orig.tar.xz
 ca8aa18a2087b3f456b7347ab3696866 8628 java optional jackson-databind_2.14.0+ds-1+deb13u1.debian.tar.xz
 83c8f8f2ed57cc7af1c5e19353cf81c3 18427 java optional jackson-databind_2.14.0+ds-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=7X0O
-----END PGP SIGNATURE-----