-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Jackson Release 2.9.10
Tatu Saloranta edited this page Nov 1, 2019
·
19 revisions
Patch version of 2.9, released 2019-09-21.
It will likely remain the last full 2.9.x release.
Following fixes are included (note: this includes fixes that intermediate 2.9.9.x
micro-patches had)
- #540: UTF8StreamJsonParser: fix byte to int conversion for malformed escapes
- #556: 'IndexOutOfBoundsException' in UTF8JsonGenerator.writeString(Reader, len) when using a negative length
-
#2331:
JsonMappingException
through nested getter with generic wildcard return type - #2334: Block one more gadget type (logback, CVE-2019-12384)
- #2341: Block one more gadget type (jdom, CVE-2019-12814)
-
#2374:
ObjectMapper. getRegisteredModuleIds()
throws NPE if no modules registered - #2387: Block one more gadget type (ehcache, CVE-2019-14379)
- #2389: Block one more gadget type (logback, CVE-2019-14439)
- #2404: FAIL_ON_MISSING_EXTERNAL_TYPE_ID_PROPERTY setting ignored when creator properties are buffered
- #2410: Block one more gadget type (HikariCP, CVE-2019-14540)
- #2420: Block one more gadget type (no CVE allocated yet)
- #2449: Block one more gadget type (HikariCP, CVE-2019-14439 / CVE-2019-16335)
- #2460: Block one mode gadget type (ehcache, CVE-2019-17267)
- #2462: Block two more gadget types (commons-configuration)
- #2469: Block one mode gadget type (xalan2)
-
#336:
WRITE_BIGDECIMAL_AS_PLAIN
Not Used When Writing Pretty -
#340: Incompatible woodstox-core and stax2-api dependencies (upgrade to
woodstox-core
5.3.0)
The first release to support Scala 2.13. Thanks to Adriaan Moors and Seth Tisue!