Oracle corp. uses jackson_databind* 2.10.2 *widely across may product lines.
The latest CVE requires us to move to any of the following versions :
*2.11.0, 2.10.5.1 OR 2.9.10.8 * 

Any recommendations on which version would be the most compatible and 
secure if we are currently on jackson 2.10.2 ?

We are tentatively considering version 2.10.5.1.


Thanks,
Ron

-- 
You received this message because you are subscribed to the Google Groups 
"jackson-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jackson-user/ded92846-be5d-42a9-9b72-bd40e6f416c3n%40googlegroups.com.

Reply via email to