Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade to Jackson Bom 2.13.2 #30242

Closed
snicoll opened this issue Mar 16, 2022 · 5 comments
Closed

Upgrade to Jackson Bom 2.13.2 #30242

snicoll opened this issue Mar 16, 2022 · 5 comments
Labels
type: dependency-upgrade A dependency upgrade
Milestone
2.6.5

Comments

@snicoll
Copy link
Member

snicoll commented Mar 16, 2022

No description provided.

@snicoll snicoll added the type: dependency-upgrade A dependency upgrade label Mar 16, 2022
@snicoll snicoll added this to the 2.6.5 milestone Mar 16, 2022
@snicoll
Copy link
Member Author

snicoll commented Mar 16, 2022

It looks like things are still being released as com.fasterxml.jackson.module:jackson-module-kotlin:2.13.2 isn't available yet.

@snicoll snicoll added the status: blocked An issue that's blocked on an external project change label Mar 16, 2022
@snicoll
Copy link
Member Author

snicoll commented Mar 16, 2022

See FasterXML/jackson-module-kotlin#550

@dineshbhagat
Copy link

@snicoll Its released: https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-kotlin/2.13.2/

@snicoll snicoll removed the status: blocked An issue that's blocked on an external project change label Mar 18, 2022
@AshishKmrSingh
Copy link

Hi, There is going to be a new version for jackson. 2.13.2 was DoS vulnerable. I believe they have that fix in 2.13.2.1 which they released today. Will you be taking this in Spring boot in some time in the near future?

@snicoll
Copy link
Member Author

snicoll commented Mar 25, 2022

We will upgrade in our next release train, next month.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
type: dependency-upgrade A dependency upgrade
Projects
None yet
Milestone
2.6.5
Development

No branches or pull requests
3 participants
@snicoll @dineshbhagat @AshishKmrSingh