This package includes two jar files in two license flavors jackson-core and jackson-mapper with suffixes -asl and -lgpl. Please don't link against this jar files but against the symlinks that don't have the license suffixes: /usr/share/java/jackson-core.jar /usr/share/java/jackson-mapper.jar Once I've worked out this issue with Debian-Legal and the Buildsystem I may remove the two different jars and only ship one.