diff --git a/pom.xml b/pom.xml index b9d357be68..a789d1de47 100644 --- a/pom.xml +++ b/pom.xml @@ -5,12 +5,12 @@ com.fasterxml.jackson jackson-base - 2.10.6-SNAPSHOT + 2.10.5.20201202 com.fasterxml.jackson.core jackson-databind - 2.10.6-SNAPSHOT + 2.10.5.1-SNAPSHOT jackson-databind bundle General data-binding functionality for Jackson: works on core streaming API diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x index d736a52093..b896d3fca6 100644 --- a/release-notes/VERSION-2.x +++ b/release-notes/VERSION-2.x @@ -4,7 +4,7 @@ Project: jackson-databind === Releases === ------------------------------------------------------------------------ -(not yet released) +2.10.5.1 (02-Dec-2020) #2589: `DOMDeserializer`: setExpandEntityReferences(false) may not prevent external entity expansion in all cases (CVE-2020-25649)