Hello, There are 18 no-dsa marked entries for jackson-databind for buster, the same ones I fixed for jessie and also the same ones that I intend to work on for stretch. It'd be thus unfair if those are pending in buster and so I ask if it'd be OK for me to prepare a corresponding update for buster (-pu)? If you agree, I could send a debdiff in the next couple of days and upload after your ack? Let me know what you think? - u