From 05584239ab5845dcd765e3f21ed6c9f025e9603c Mon Sep 17 00:00:00 2001 From: Tatu Saloranta Date: Tue, 1 Dec 2020 19:43:05 -0800 Subject: [PATCH] Prepare for 2.10.5.1 micro-patch --- pom.xml | 4 ++-- release-notes/VERSION-2.x | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/pom.xml b/pom.xml index b9d357be68..a789d1de47 100644 --- a/pom.xml +++ b/pom.xml @@ -5,12 +5,12 @@ com.fasterxml.jackson jackson-base - 2.10.6-SNAPSHOT + 2.10.5.20201202 com.fasterxml.jackson.core jackson-databind - 2.10.6-SNAPSHOT + 2.10.5.1-SNAPSHOT jackson-databind bundle General data-binding functionality for Jackson: works on core streaming API diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x index d736a52093..b896d3fca6 100644 --- a/release-notes/VERSION-2.x +++ b/release-notes/VERSION-2.x @@ -4,7 +4,7 @@ Project: jackson-databind === Releases === ------------------------------------------------------------------------ -(not yet released) +2.10.5.1 (02-Dec-2020) #2589: `DOMDeserializer`: setExpandEntityReferences(false) may not prevent external entity expansion in all cases (CVE-2020-25649)