You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@olingo.apache.org by "mibo (Jira)" <ji...@apache.org> on 2019/11/06 18:49:00 UTC

[jira] [Resolved] (OLINGO-1407) Update Jackson (Databind) version

     [ https://issues.apache.org/jira/browse/OLINGO-1407?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

mibo resolved OLINGO-1407.
--------------------------
    Resolution: Fixed

> Update Jackson (Databind) version
> ---------------------------------
>
>                 Key: OLINGO-1407
>                 URL: https://issues.apache.org/jira/browse/OLINGO-1407
>             Project: Olingo
>          Issue Type: Task
>          Components: odata4-server
>    Affects Versions: (Java) V4 4.6.0
>            Reporter: mibo
>            Assignee: mibo
>            Priority: Major
>             Fix For: (Java) V4 4.7.0
>
>
> Update Jackson (incl. databind) version to new minor release {{2.10.x}} branch.
> Based on changes in Jackson the deserialisation is now safer (see e.g. this [blog post|https://blog.gypsyengineer.com/en/security/safer-deserialization-with-new-jackson.html].
> {code}
>     <jackson.version>2.9.8</jackson.version>
>     <jackson-databind.version>2.9.9.3</jackson-databind.version>
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)