Skip to content

Commit

Permalink
Update jackson to 2.12.1.
Browse files Browse the repository at this point in the history
  • Loading branch information
robotdan committed Jan 12, 2021
1 parent 79f53de commit 00182fe
Show file tree
Hide file tree
Showing 3 changed files with 22 additions and 4 deletions.
18 changes: 18 additions & 0 deletions CHANGES
@@ -1,5 +1,23 @@
FusionAuth JWT Changes

Changes in 4.1.0

* Upgraded Jackson Core to 2.12.1. This upgrade addresses CVE-2020-14060, CVE-2020-14061, CVE-2020-14062, CVE-2020-14195 and CVE-2020-24616 and CVE-2020-24750.

See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-14060
See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-14061
See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-14062
See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-14195
See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-24616
See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-24750

Resolves https://github.com/FusionAuth/fusionauth-jwt/issues/29

* Initial support for OAuth2 Authorization Server Metadata.

Resolves https://github.com/FusionAuth/fusionauth-jwt/issues/23
Thanks to @jamietanna for his contribution.

Changes in 4.0.1

* Added ability to provide your own HttpURLConnection to the JSONWebKeySetHelper helper methods.
Expand Down
2 changes: 1 addition & 1 deletion build.savant
Expand Up @@ -15,7 +15,7 @@
*/

savantVersion = "1.0.0"
jacksonVersion = "2.10.3"
jacksonVersion = "2.12.1"

project(group: "io.fusionauth", name: "fusionauth-jwt", version: "4.1.0", licenses: ["ApacheV2_0"]) {

Expand Down
6 changes: 3 additions & 3 deletions pom.xml
Expand Up @@ -61,17 +61,17 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
<version>2.10.3</version>
<version>2.12.1</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.10.3</version>
<version>2.12.1</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-annotations</artifactId>
<version>2.10.3</version>
<version>2.12.1</version>
</dependency>

<!-- Testing Dependencies -->
Expand Down

0 comments on commit 00182fe

Please sign in to comment.