mibo created OLINGO-1407:
----------------------------
Summary: Update Jackson (Databind) version
Key: OLINGO-1407
URL: https://issues.apache.org/jira/browse/OLINGO-1407
Project: Olingo
Issue Type: Task
Components: odata4-server
Affects Versions: (Java) V4 4.6.0
Reporter: mibo
Fix For: (Java) V4 4.7.0
Update Jackson (incl. databind) version to new minor release {{2.10.x}} branch.
Based on changes in Jackson the deserialisation is now safer (see e.g. this
[blog
post|https://blog.gypsyengineer.com/en/security/safer-deserialization-with-new-jackson.html].
{code}
<jackson.version>2.9.8</jackson.version>
<jackson-databind.version>2.9.9.3</jackson-databind.version>
{code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
