honeymoose
/
jjwt
mirror of https://github.com/jwtk/jjwt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updating to jackson-databind 2.9.10 (#498)

This commit is contained in:
Brian Demers 2019-09-25 14:28:34 -04:00 committed by GitHub
parent c0d8b8e8e9
commit c246385be1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGELOG.md
View File

@ -1,5 +1,10 @@
## Release Notes ## Release Notes
### 0.11.0
* Updates the Jackson dependency version to [2.9.10](https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9#patches)
to address three security vulnerabilities in Jackson:
### 0.10.7 ### 0.10.7
This patch release: This patch release:

2
pom.xml
View File

@ -94,7 +94,7 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<buildNumber>${user.name}-${maven.build.timestamp}</buildNumber> <buildNumber>${user.name}-${maven.build.timestamp}</buildNumber>
<jackson.version>2.9.9.3</jackson.version> <jackson.version>2.9.10</jackson.version>
<orgjson.version>20180130</orgjson.version> <orgjson.version>20180130</orgjson.version>
<gson.version>2.8.5</gson.version> <gson.version>2.8.5</gson.version>