Skip to content

Commit f045422

Browse files
committed
Prepare for micro-patch 2.12.7.1
1 parent cd09097 commit f045422

File tree

2 files changed

+2
-3
lines changed

2 files changed

+2
-3
lines changed

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515

1616
<groupId>com.fasterxml.jackson.core</groupId>
1717
<artifactId>jackson-databind</artifactId>
18-
<version>2.12.8-SNAPSHOT</version>
18+
<version>2.12.7.1-SNAPSHOT</version>
1919
<name>jackson-databind</name>
2020
<packaging>bundle</packaging>
2121
<description>General data-binding functionality for Jackson: works on core streaming API</description>

release-notes/VERSION-2.x

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,10 @@ Project: jackson-databind
44
=== Releases ===
55
------------------------------------------------------------------------
66

7-
2.12.7.1 (not yest released)
7+
2.12.7.1 (12-Oct-2022)
88

99
#3582: Add check in `BeanDeserializer._deserializeFromArray()` to prevent
1010
use of deeply nested arrays [CVE-2022-42004]
11-
1211
#3590: Add check in primitive value deserializers to avoid deep wrapper array
1312
nesting wrt `UNWRAP_SINGLE_VALUE_ARRAYS` [CVE-2022-42003]
1413

0 commit comments

Comments
 (0)