snakeyaml (1.28-1+deb11u2) bullseye; urgency=medium
* Team upload.
* Install README.Debian.security and explain that snakeyaml
is not designed to process YAML input from untrusted sources.
-- Markus Koschany <apo@debian.org> Fri, 24 Feb 2023 22:22:25 +0100
snakeyaml (1.28-1+deb11u1) bullseye; urgency=medium
* Team upload.
Fix CVE-2022-25857, CVE-2022-38749, CVE-2022-38750 and CVE-2022-38751.
Several security vulnerabilities have been discovered in SnakeYaml, a YAML
parser for Java, which could facilitate a denial of service attack whenever
maliciously crafted input files are processed by SnakeYaml.
-- Markus Koschany <apo@debian.org> Sun, 19 Feb 2023 17:05:00 +0100
snakeyaml (1.28-1) unstable; urgency=medium
* Team upload.
* New upstream release
* Standards-Version updated to 4.5.1
-- Emmanuel Bourg <ebourg@apache.org> Sun, 28 Feb 2021 22:49:25 +0100
snakeyaml (1.27+ds-1) unstable; urgency=medium
[ Mechtilde Stehmann ]
* [722022e] Added VCS files to exclude
* [96f4e71] New upstream version 1.27+ds
* [8313a5c] Bumped to 2020
* [aa6d948] Added metadata to package
* [b7dab94] Bumped compat to 13
* [ed83771] Skipped tests
* [5426781] Improved debian/watch
* [ac8f5c3] Added build dependencies libjs-jquery and libjs-jquery-ui
* [50b8706] List examples dirs to move in separate dirs
* [bbdacc5] Use js libraries from debian repo
-- Mechtilde Stehmann <mechtilde@debian.org> Sat, 07 Nov 2020 10:58:51 +0100
snakeyaml (1.26+ds-1) unstable; urgency=medium
* Team upload.
* Add repacksuffix to debian/watch
* New upstream version 1.26+ds
* Add build-dep on libsurefire-java and enable maven-surefire-plugin
* Remove patches applied upstream
* Bump Standards-Version to 4.5.0
* Set "Rules-Requires-Root: no" in debian/control
* Mark libyaml-snake-java[-doc] Multi-Arch: foreign
-- tony mancill <tmancill@debian.org> Thu, 26 Mar 2020 20:29:51 -0700
snakeyaml (1.25+ds-3) unstable; urgency=medium
* Team upload.
* Add patch for CVE-2017-18640 (Closes: #952683)
-- tony mancill <tmancill@debian.org> Wed, 25 Mar 2020 21:45:58 -0700
snakeyaml (1.25+ds-2) unstable; urgency=medium
[ Mechtilde Stehmann ]
* [b33dbfa] fixed debian/maven.rules so rdepends packages can be built again
-- Mechtilde Stehmann <mechtilde@debian.org> Wed, 18 Sep 2019 14:30:59 +0200
snakeyaml (1.25+ds-1) unstable; urgency=medium
[ Mechtilde ]
* [34a0dea] debian/salsa-ci.yml was added when the repo was cloned
* [93286b3] New upstream version 1.25+ds
* [4e86887] Use debhelper-compat for choosing compat level
* [7189713] Updated Uploader in debian/control
* [0291e6d] Added me to debian/copyright
* [76e67c7] removed debian/source/lintian-overrides - no longer necessary
* [90f0806] expanded debian/watch to detect repacked version
* [468455d] Added new dependencies to debian/control and debian/maven.rules
-- Mechtilde Stehmann <mechtilde@debian.org> Sun, 15 Sep 2019 12:33:38 +0200
snakeyaml (1.23-1) unstable; urgency=medium
* Team upload.
* New upstream release.
- Fixes the test failure with Java 11 (Closes: #912389)
* Standards-Version updated to 4.2.1
-- Emmanuel Bourg <ebourg@apache.org> Wed, 07 Nov 2018 01:12:28 +0100
snakeyaml (1.21-1) unstable; urgency=medium
* Team upload.
* New upstream release.
* Bump Standards-Version to 4.1.4. No changes were required.
* Migrate Vcs-* URLs to salsa.d.o.
-- Miguel Landaeta <nomadium@debian.org> Sun, 03 Jun 2018 17:02:57 +0100
snakeyaml (1.20-1) unstable; urgency=medium
* Team upload.
* New upstream version 1.20.
* Use compat level 11.
* Declare compliance with Debian Policy 4.1.3.
-- Markus Koschany <apo@debian.org> Wed, 07 Mar 2018 00:17:18 +0100
snakeyaml (1.19-1) unstable; urgency=medium
* Team upload.
* New upstream version 1.19.
* Fix debian/watch file and detect newer releases.
* Add get-orig-source target.
* Switch to compat level 10.
* Use only Build-Depends field and wrap-and-sort -sa.
* Declare compliance with Debian Policy 4.1.2.
* Use https for Format field.
* Ignore org.sonatype.plugins:nexus-staging-maven-plugin
* Ignore org.apache.maven.plugins:maven-enforcer-plugin
* Update maven rule for spring-context.
* Work around a FTBFS with Java 9 by removing the
NonAsciiCharsInClassNameTest class. Thanks to Chris West for the report.
(Closes: #874140)
-- Markus Koschany <apo@debian.org> Fri, 01 Dec 2017 20:53:20 +0100
snakeyaml (1.17-1) unstable; urgency=medium
* Team upload.
* New upstream release (Closes: #778345)
* debian/control:
- The package is now co-maintained with the Java Team
- Updated the Homepage field
- Priority changed to optional
- Removed the Pre-Depends on dpkg
- Removed the unused build dependency on javahelper
* Standards-Version updated to 3.9.8 (no changes)
* Enabled the unit tests
* Updated debian/watch to track the release tags on Bitbucket
* Fixed the short name of the BSD license in debian/copyright
-- Emmanuel Bourg <ebourg@apache.org> Sun, 10 Apr 2016 00:37:52 +0200
snakeyaml (1.12-2) unstable; urgency=low
[ Stefan Denker ]
* Add versionless symlink in /usr/share/java/
* Add group-ID-Directory to maven-repository
[ Hilko Bengen ]
* Add myself to uploaders
* Bump Standards-Version
* Switch build to use maven-debian-helper, add -doc package
-- Hilko Bengen <bengen@debian.org> Sat, 24 Aug 2013 19:05:38 +0200
snakeyaml (1.12-1) unstable; urgency=low
* Initial release (Closes: #585903 )
-- Stefan Denker <Stefan+Debian@dn-kr.de> Mon, 23 Jul 2013 22:07:42 +0200