Upgrade to Jackson Bom 2.13.2 #30242

Activity

1. snicoll

   added

   type: dependency-upgradeA dependency upgradeA dependency upgrade

   on Mar 16, 2022
2. snicoll

   added this to the 2.6.5 milestone on Mar 16, 2022
3. snicoll commented on Mar 16, 2022

   

   snicoll

   on Mar 16, 2022

   MemberAuthor

   More actions

   It looks like things are still being released as com.fasterxml.jackson.module:jackson-module-kotlin:2.13.2 isn't available yet.
4. snicoll

   added

   status: blockedAn issue that's blocked on an external project changeAn issue that's blocked on an external project change

   on Mar 16, 2022
5. snicoll commented on Mar 16, 2022

   

   snicoll

   on Mar 16, 2022

   MemberAuthor

   More actions

   See FasterXML/jackson-module-kotlin#550
6. dineshbhagat commented on Mar 18, 2022

   

   dineshbhagat

   on Mar 18, 2022

   More actions

   @snicoll Its released: https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-kotlin/2.13.2/
7. snicoll

   removed

   status: blockedAn issue that's blocked on an external project changeAn issue that's blocked on an external project change

   on Mar 18, 2022
8. snicoll

   added a commit that references this issue on Mar 19, 2022

   Upgrade to Jackson Bom 2.13.2

   ...

   This issue will close once commit e49de1f is merged into the 'main' branch.

   e49de1f
9. snicoll

   closed this as completedin e49de1fon Mar 19, 2022
10. AshishKmrSingh commented on Mar 25, 2022

    

    AshishKmrSingh

    on Mar 25, 2022

    More actions

    Hi, There is going to be a new version for jackson. 2.13.2 was DoS vulnerable. I believe they have that fix in 2.13.2.1 which they released today. Will you be taking this in Spring boot in some time in the near future?
11. snicoll commented on Mar 25, 2022

    

    snicoll

    on Mar 25, 2022

    MemberAuthor

    More actions

    We will upgrade in our next release train, next month.